43
Syntax
In non-FIPS mode:
service-type { ftp | lan-access | { ssh | telnet | terminal } * | portal | ppp }
undo service-type { ftp | lan-access | { ssh | telnet | terminal } * | portal | ppp }
In FIPS mode:
service-type { lan-access | { ssh | terminal } * | portal | ppp }
undo service-type { lan-access | { ssh | terminal } * | portal | ppp }
Default
A local user is authorized with no service and cannot use any service.
Views
Local user view
Predefined user roles
network-admin
Parameters
ftp: Authorizes the user to use the FTP service. By default, the user can use the root directory of the FTP,
SFTP, or SCP server. The authorized directory can be modified by using the authorization-attribute
work-directory command.
lan-access: Authorizes the user to use the LAN access service. The users are typically Ethernet users, for
example, 802.1X users.
ssh: Authorizes the user to use the SSH service.
telnet: Authorizes the user to use the Telnet service.
terminal: Authorizes the user to use the terminal service and log in from a console, AUX, or async port.
portal: Authorizes the user to use the Portal service.
ppp: Authorizes the user to use the PPP service.
Usage guidelines
You can assign multiple service types to a user.
Examples
# Authorize the device management user user1 to use the Telnet and FTP services.
<Sysname> system-view
[Sysname] local-user user1 class manage
[Sysname-luser-manage-user1] service-type telnet
[Sysname-luser-manage-user1] service-type ftp
Related commands
display local-user
state (local user view)
Use state to set the status of a local user.
Use undo state to restore the default.