F3215-HP Load Balancing Module Security Configuration Guide-6PW101

82
# Enable the Telnet server on the device.
[LB] telnet server enable
# Configure LB module to use AAA for Telnet users.
[LB] user-interface vty 0 4
[LB-ui-vty0-4] authentication-mode scheme
[LB-ui-vty0-4] quit
# Create local user named telnet.
[LB] local-user telnet
[LB-luser-telnet] service-type telnet
[LB-luser-telnet] password simple aabbcc
[LB-luser-telnet] quit
# Configure the AAA methods for the ISP domain as local authentication and authorization.
[LB] domain system
[LB-isp-system] authentication login local
[LB-isp-system] authorization login local
[LB-isp-system] quit
2. Verify the configuration.
A user can Telnet to the user interface of LB module by using username telnet@system and correct
password.
# Use the display connection command to view the connection information on LB module.
[LB] display connection
Index=1 ,Username=telnet@system
IP=192.168.1.58
IPv6=N/A
Total 1 connection(s) matched.
Level switching authentication for Telnet users by a RADIUS
server
Network requirements
As shown in Figure 33, configure LB module to:
• Use local authentication for the Telnet user and assign the privilege level of 0 to the user when the
user passes authentication.
• Use the RADIUS server for level switching authentication of the Telnet user. If the RADIUS server is
not available, use local authentication.