R3102-R3103-HP 6600/HSR6600 Routers Security Command Reference

54
service-type
Use service-type to specify the service types that a user can use.
Use undo service-type to delete one or all service types configured for a user.
Syntax
service-type { dvpn | ftp | lan-access | { ssh | telnet | terminal } * | portal | ppp | web }
undo service-type { dvpn | ftp | lan-access | { ssh | telnet | terminal } * | portal | ppp | web }
Default
A user is authorized with no service.
Views
Local user view
Default command level
3: Manage level
Parameters
dvpn: Authorizes the user to use the DVPN service.
ftp: Authorizes the user to use the FTP service. The user can use the root directory of the FTP server by
default. This keyword is not supported in FIPS mode.
lan-access: Authorizes the user to use the LAN access service. The users are mainly Ethernet users such
as 802.1X users. This keyword is supported only on SAP interface modules.
ssh: Authorizes the user to use the SSH service.
telnet: Authorizes the user to use the Telnet service. This keyword is not supported in FIPS mode.
terminal: Authorizes the user to use the terminal service, allowing the user to log in from the console, AUX
or Asyn port. In FIPS mode, this keyword must be specified.
portal: Authorizes the user to use the portal service.
ppp: Authorizes the user to use the PPP service.
web: Authorizes the user to use the Web service.
Usage guidelines
The following matrix shows the keyword and router compatibility:
Keyword 6602 HSR6602 6604/6608/6616
web Yes No No
You can assign multiple service types to the same user.
Examples
# Authorize user user1 to use the Telnet service.
<Sysname> system-view
[Sysname] local-user user1
[Sysname-luser-user1] service-type telnet