HP A5800 Series User Manual

16
Ste
p
Command Remarks
parameters
Using remote
authentication
(RADIUS,
HWTACACS,
and LDAP
authentications)
Configure the user privilege level
on the authentication server
• For remote authentication, if
you do not configure the user
privilege level, the user
privilege level depends on the
default configuration of the
authentication server.
Example of configuring a user privilege level by using AAA authentication parameters
# You are required to authenticate the users that Telnet to the switch through VTY 1, verify their username and
password, and specify the user privilege level as 3.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password cipher 12345678
[Sysname-luser-test] service-type telnet
When users Telnet to the switch through VTY 1, they must enter username test and password 12345678. After
passing the authentication, the users can only use the commands of level 0. If the users want to use
commands of levels 0, 1, 2 and 3, the following configuration is required:
[Sysname-luser-test] authorization-attribute level 3
Configuring the user privilege level under a user interface
• If the authentication mode of a user interface is scheme, and SSH publickey authentication type (only a
username is needed for this authentication type) is adopted, the user privilege level of users logging
into the user interface is the user interface level.
• If the authentication mode of a user interface is none or password, the user privilege level of users
logging into the user interface is the user interface level.
To configure the user privilege level under a user interface (SSH publickey authentication type):
Ste
p
Command Remarks
Configure the authentication type
for SSH users as publickey
For more information about SSH,
see Security Configuration Guide.
Required if the SSH login mode is
adopted, and only username is
needed during authentication.
After the configuration, the
authentication mode of the
corresponding user interface must
be set to scheme.
Enter system view system-view —
Enter user interface view
user-interface { first-num1
[ last-num1 ] | vty first-num2
[ last-num2 ] }
—
Configure the authentication mode
for any user who uses the current
user interface to log in to the switch
authentication-mode scheme
Required
By default, the authentication
mode for VTY users is password,
and no authentication is needed
for AUX users.

HP A5800 Series Specifications

General

Brand	HP
Model	A5800 Series
Category	Switch
Language	English