R3303-HP HSR6800 Routers Fundamentals Configuration Guide

35
Figure 14 Password authentication interface for Telnet login
Configuring scheme authentication for Telnet login
Follow these guidelines when you configure scheme authentication for Telnet login:
• To make the command authorization or command accounting function take effect, apply an
HWTACACS scheme to the intended ISP domain. This scheme must specify the IP address of the
authorization server and other authorization parameters.
• If the local authentication scheme is used, use the authorization-attribute level level command in
local user view to set the user privilege level on the device.
• If a RADIUS or HWTACACS authentication scheme is used, set the user privilege level on the
RADIUS or HWTACACS server.
To configure scheme authentication for Telnet login:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable Telnet server.
telnet server enable
By default, the Telnet server function is
disabled.
3. Enter one or multiple
VTY user interface views.
user-interface vty first-number
[ last-number ]
N/A
4. Enable scheme
authentication.
authentication-mode scheme
Whether local, RADIUS, or HWTACACS
authentication is adopted depends on the
configured AAA scheme.
By default, local authentication is adopted.