HP A-F1000-E Getting Started Manual page 32

To do...
Enter the
default ISP
domain view
Configure
the
Specify the
authentic
AAA scheme to
ation
be applied to
mode
the domain
Exit to system
view
Create a local user and
enter local user view
Set the local password
Specifies the command level
of the local user
Specify the service type for
the local user
Exit to system view
Configure common settings
for VTY user interfaces
After you enable command authorization or command accounting, you need to perform the following
configuration to make the function take effect:
Create a HWTACACS scheme, and specify the IP address of the authorization server and other
•
authorization parameters.
• Reference the created HWTACACS scheme in the ISP domain.
When users adopt the scheme mode to log in to the device, the level of the commands that the users can
access depends on the user privilege level defined in the AAA scheme.
• When the AAA scheme is local, the user privilege level is defined by the authorization-attribute
level level command.
When the AAA scheme is RADIUS or HWTACACS, the user privilege level is configured on the
•
RADIUS or HWTACACS server.
When you log in to the device through Telnet again:
You are required to enter the login username and password. A prompt such as <HP> appears after
•
you enter the correct username (for example, admin) and password and press Enter, as shown in
Figure 20.
• After you enter the correct username and password, if the device prompts you to enter another
password of the specified type, you will be authenticated for the second time. In other words, to
pass authentication, you must enter a correct password as prompted.
Use the command...
domain domain-name
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
quit
local-user user-name
password { cipher |
simple } password
authorization-attribute
level level
service-type telnet
quit
—
26
Remarks
Optional
By default, the AAA scheme is local.
By default, no local user exists.
Required
By default, no local password is set.
Optional
By default, the command level is 0.
Required
By default, no service type is specified.
—
Optional
See "Configuring common settings for VTY user
interfaces (optional)."