H3C SR6600 SPE-FWM, Руководство по базовой конфигурации

Страница: 55 / 184

3-44
To do… Use the command… Remarks
Set the local password
password { cipher | simple }
password
Required
By default, no local password is set.
Specifies the command level of the
local user authorization-attribute level
level
Optional
By default, the command level is 0.
Specify the service type for the local
user
service-type telnet
Required
By default, no service type is
specified.
Exit to system view quit —
Configure common settings for VTY
user interfaces
—
Optional
See Configuring Common Settings
for VTY User Interfaces (Optional) .
After you enable command authorization, you need to perform the following configuration to make the
function take effect:
z
Create a HWTACACS scheme, and specify the IP address of the authorization server and other
authorization parameters. For more information, see AAA in the Security Configuration Guide.
z
Reference the created HWTACACS scheme in the ISP domain. For more information, see AAA in
the Security Configuration Guide .
After you enable command accounting, you need to perform the following configuration to make the
function take effect:
z
Create a HWTACACS scheme, and specify the IP address of the accounting server and other
accounting parameters. For more information, see AAA in the Security Configuration Guide .
z
Reference the created HWTACACS scheme in the ISP domain. For more information, see AAA in
the Security Configuration Guide .
When users adopt the scheme mode to log in to the device, the level of the commands that the users
can access depends on the user privilege level defined in the AAA scheme.
z
When the AAA scheme is local, the user privilege level is defined by the authorization-attribute
level level command.
z
When the AAA scheme is RADIUS or HWTACACS, the user privilege level is configured on the
RADIUS or HWTACACS server.
For more information about AAA, RADIUS, and HWTACACS, see AAA in the Security Configuration
Guide .
When you log in to the device through telnet again:
z
You are required to enter the login username and password. A prompt such as <H3C> appears
after you enter the correct username (for example, admin) and password and press Enter , as
shown in Figure 3-12 .
z
If “All user interfaces are used, please try later!” is displayed, it means the current login users
exceed the maximum number. Please try later.