HP HP ProCurve Series 6600, Руководство по обеспечению безопасности доступа

Страница: 312 / 778

6-78
RADIUS Authentication, Authorization, and Accounting
Creating Local Privilege Levels
To create a local user enter this command for the group with the appropriate
authorizations.
If include-credentials is enabled, displaying the configuration shows the user
passwords as SHA1 hash. If include-credentials is not enabled, then no pass-
word information is shown.
If a user is assigned to a command group and the group is subsequently
deleted, the user will have operator privileges.
Figure 6-36. Example of Creating a Local User for a Group
Syntax : [no] aaa authentication local-user < username > group < group-name >
password <plaintext | sha1 < password >>
Defines a local user for a defined group.
local-user < username >:
The local user being added to the
authorization group. The username can have a maximum of
16 characters. It must not contain spaces and is case-
sensitive.
group < group-name >:
The authorization group the local user
belongs to. The group must have been created already.
password <plaintext | sha1 < password >>:
The plaintext password
string can have a maximum of 16 characters. It must not
contain spaces and is case-sensitive.
Note: You are not allowed to actually enter the plaintext
password in-line as part of the command; you will be
prompted for it. The password is obscured when you enter
it.This is similar to entering the password for the manager
or operator.
HP Switch(config)# aaa authentication local-user User1 group Redgroup password
plaintext
New password for User1: *******
Please retype new password for User1: *******
HP Switch(config)#