Filter
Top Products
To do… Use the command… Remarks
Enter the de
ISP domain
view
fault
e domain domain-nam
Apply the
specified AAA
scheme to the
domain
hwtacacs-scheme-name [ local ] |
local | none | radius-scheme
radius-scheme-name [ local }
authentication default
{ hwtacacs-scheme
]
Configure the
authentication
mode
Exit to system
view
quit
al
password on the AAA server.
re information, see the
.)
Option
By default, the AAA scheme is
local.
If you specify the local AAA
scheme, perform the configuration
concerning local user as well. If
you specify an existing scheme by
opr viding the radius-scheme-name
argument, perform the following
configuration as well:
• For RADIUS and HWTACACS
configuration, see the Security
Configuration Guide.
• Configure the username and
(For mo
Security Configuration Guide
Create a local user and enter local
user view
local-user user-name
Required
By default, no local user exists.
Set the local password
password { cipher | simple }
ired
no local password is
password
Requ
By default,
set.
Specify the command level of the
local user
authorization-attribute level level
is 0.
Optional
By default, the command level
Specify the service type
local user
for the
e-type ssh
efault, no service type is
servic
Required
By d
specified.
Return to system view quit —
Create an SSH user, and specify
the authentication mode for the { password | { any |
password-publickey | publickey }
gn publickey keyname }
By default, no SSH user exists, and
ication mode is
SSH user
ssh user username service-type
stelnet authentication-type
assi
Required
no authent
specified.
Configure common settings for VTY
rfaces
—
See “Configuring common settings
for VTY user interfaces (optional).”
Optional
user inte
NOTE:
his chapter describes
how to configure an SSH client by using password authentication. For more T
information about SSH and how to configure an SSH client by using publickey, see the
Security
Configuration Guide
.
After you enable command authorization or command accounting, you need to perform the following
configuration to make the function take effect:
he authorization server and other • Create a HWTACACS scheme, and specify the IP address of t
authorization parameters.
50