R3303-HP HSR6800 Routers Fundamentals Configuration Guide

28
Figure 10 Password authentication interface for console login
Configuring scheme authentication for console login
Follow these guidelines when you configure scheme authentication for console login:
• To make the command authorization or command accounting function take effect, apply an
HWTACACS scheme to the intended ISP domain. This scheme must specify the IP address of the
authorization server and other authorization parameters.
• If the local authentication scheme is used, use the authorization-attribute level level command in
local user view to set the user privilege level on the device.
• If a RADIUS or HWTACACS authentication scheme is used, set the user privilege level on the
RADIUS or HWTACACS server.
To configure scheme authentication for console login:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter console user interface
view.
user-interface console first-number
[ last-number ]
N/A
3. Enable scheme
authentication.
authentication-mode scheme
Whether local, RADIUS, or
HWTACACS authentication is
adopted depends on the configured
AAA scheme.
By default, console login users are
not authenticated.