R211x-HP Flexfabric 11900 Security Command Reference

33
service-type
Use service-type to specify the service types that a local user can use.
Use undo service-type to delete service types configured for a local user.
Syntax
In non-FIPS mode:
service-type { ftp | lan-access | { ssh | telnet | terminal } * }
undo service-type { ftp | lan-access | { ssh | telnet | terminal } * }
In FIPS mode:
service-type { lan-access | { ssh | terminal } * }
undo service-type { lan-access | { ssh | terminal } * }
Default
A local user is authorized with no service and cannot use any service.
Views
Local user view
Predefined user roles
network-admin
mdc-admin
Parameters
ftp: Authorizes the user to use the FTP service. By default, the user can use the root directory of the FTP
server. The authorized directory can be modified by using the authorization-attribute work-directory
command.
lan-access: Authorizes the user to use the LAN access service. The users are typically Ethernet users, for
example, 802.1X users.
ssh: Authorizes the user to use the SSH service.
telnet: Authorizes the user to use the Telnet service.
terminal: Authorizes the user to use the terminal service and log in from a console port.
Usage guidelines
You can assign multiple service types to a user.
Examples
# Authorize the device management user user1 to use the Telnet and FTP services.
<Sysname> system-view
[Sysname] local-user user1 class manage
[Sysname-luser-manage-user1] service-type telnet
[Sysname-luser-manage-user1] service-type ftp
Related commands
display local-user