6-78
RADIUS Authentication, Authorization, and Accounting
Creating Local Privilege Levels
To create a local user enter this command for the group with the appropriate
authorizations.
If include-credentials is enabled, displaying the configuration shows the user
passwords as SHA1 hash. If include-credentials is not enabled, then no pass-
word information is shown.
If a user is assigned to a command group and the group is subsequently
deleted, the user will have operator privileges.
Figure 6-36. Example of Creating a Local User for a Group
Syntax: [no] aaa authentication local-user <username> group <group-name>
password <plaintext | sha1 <password>>
Defines a local user for a defined group.
local-user <username>: The local user being added to the
authorization group. The username can have a maximum of
16 characters. It must not contain spaces and is case-
sensitive.
group <group-name>: The authorization group the local user
belongs to. The group must have been created already.
password <plaintext | sha1 <password>>: The plaintext password
string can have a maximum of 16 characters. It must not
contain spaces and is case-sensitive.
Note: You are not allowed to actually enter the plaintext
password in-line as part of the command; you will be
prompted for it. The password is obscured when you enter
it.This is similar to entering the password for the manager
or operator.
HP Switch(config)# aaa authentication local-user User1 group Redgroup password
plaintext
New password for User1: *******
Please retype new password for User1: *******
HP Switch(config)#
To Next Page
Loading...
Need help?
General
