R3303-HP HSR6800 Routers Fundamentals Configuration Guide

41
Ste
p
Command Remarks
3. Enable SSH server.
ssh server enable By default, SSH server is disabled.
4. Enter one or multiple VTY user
interface views.
user-interface vty first-number
[ last-number ]
N/A
5. Enable scheme
authentication.
authentication-mode scheme
By default, password
authentication is enabled on VTY
user interfaces.
6. Enable the user interfaces to
support Telnet, SSH, or both
of them.
protocol inbound { all | ssh }
Optional.
By default, both Telnet and SSH
are supported.
7. Enable command
authorization.
command authorization
Optional.
By default, command authorization
is disabled. The commands
available for a user only depend
on the user privilege level.
If command authorization is
enabled, a command is available
only if the user has the
commensurate user privilege level
and is authorized to use the
command by the AAA scheme.
8. Enable command accounting.
command accounting
Optional.
By default, command accounting is
disabled. The accounting server
does not record the commands
executed by users.
Command accounting allows the
HWTACACS server to record all
executed commands that are
supported by the device,
regardless of the command
execution result. This function helps
control and monitor user behaviors
on the device. If command
accounting is enabled and
command authorization is not
enabled, every executed
command is recorded on the
HWTACACS server. If both
command accounting and
command authorization are
enabled, only the authorized and
executed commands are recorded
on the HWTACACS server.
9. Exit to system view.
quit N/A