HP 6125G HP 6125G & 6125G/XG Blade Switches Fundamentals Configuration - Page 20

Configuring a user privilege level for users by using the AAA module, Security Configuration Guide

Get HP 6125G PDF manuals and user guides View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals

Page 20 highlights

For more information about user login authentication, see "Logging in to the CLI." For more information about AAA and SSH, see Security Configuration Guide. Configuring a user privilege level for users by using the AAA module Step 1. Enter system view. 2. Enter user interface view. 3. Specify the scheme authentication mode. 4. Return to system view. 5. Configure the authentication mode for SSH users as password. 6. Configure the user privilege level by using the AAA module. Command Remarks system-view N/A user-interface { first-num1 [ last-num1 ] | { aux | vty } first-num2 [ last-num2 ] } N/A authentication-mode scheme By default, the authentication mode for VTY users is password, and no authentication is needed for AUX users. quit N/A For more information, see Security Configuration Guide. • To use local authentication: a. Use the local-user command to create a local user and enter local user view. b. Use the level keyword in the authorization-attribute command to configure the user privilege level. • To use remote authentication (RADIUS or HWTACACS): Configure the user privilege level on the authentication server This task is required only for SSH users who are required to provide their usernames and passwords for authentication. User either approach. For local authentication, if you do not configure the user privilege level, the user privilege level is 0. For remote authentication, if you do not configure the user privilege level, the user privilege level depends on the default configuration of the authentication server. For more information about the local-user and authorization-attribute commands, see Security Command Reference. For example: # Configure the device to use local authentication for Telnet users on VTY 1 and set the user privilege level to 3. system-view [Sysname] user-interface vty 1 [Sysname-ui-vty1] authentication-mode scheme [Sysname-ui-vty1] quit [Sysname] local-user test [Sysname-luser-test] password simple 123 [Sysname-luser-test] service-type telnet When users Telnet to the device through VTY 1, they must enter username test and password 12345678. After passing the authentication, the users can only use level-0 commands of level 0. # Assign commands of levels 0 through 3 to the users. 14

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
14
For more information about user login authentication, see "Logging in to the CLI." For more information
about AAA and SSH, see
Security Configuration Guide
.
Configuring a user privilege level for users by using the AAA module
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter user interface view.
user-interface
{
first-num1
[
last-num1
] | {
aux
|
vty
}
first-num2
[
last-num2
] }
N/A
3.
Specify the scheme
authentication mode.
authentication-mode
scheme
By default, the authentication
mode for VTY users is
password
,
and no authentication is needed
for AUX users.
4.
Return to system view.
quit
N/A
5.
Configure the authentication
mode for SSH users as
password
.
For more information, see
Security
Configuration Guide.
This task is required only for SSH
users who are required to provide
their usernames and passwords for
authentication.
6.
Configure the user privilege
level by using the AAA
module.
•
To use local authentication:
a.
Use the
local-user
command to create a
local user and enter local
user view.
b.
Use the
level
keyword in
the
authorization-attribute
command to configure the
user privilege level.
•
To use remote authentication
(RADIUS or HWTACACS):
Configure the user privilege
level on the authentication
server
User either approach.
For local authentication, if you do
not configure the user privilege
level, the user privilege level is 0.
For remote authentication, if you
do not configure the user privilege
level, the user privilege level
depends on the default
configuration of the authentication
server.
For more information about the
local-user
and
authorization-attribute
commands,
see
Security Command Reference
.
For example:
# Configure the device to use local authentication for Telnet users on VTY 1 and set the user privilege
level to 3.
<Sysname> system-view
[Sysname] user-interface vty 1
[Sysname-ui-vty1] authentication-mode scheme
[Sysname-ui-vty1] quit
[Sysname] local-user test
[Sysname-luser-test] password simple 123
[Sysname-luser-test] service-type telnet
When users Telnet to the device through VTY 1, they must enter username
test
and password
12345678
.
After passing the authentication, the users can only use level-0 commands of level 0.
# Assign commands of levels 0 through 3 to the users.