HP MSR2000/3000/4000 Router Series Security Command Reference

34
Views
System view
Predefined user roles
network-admin
Parameters
user-name: Name for the local user, a case-sensitive string of 1 to 55 characters that does not contain the
domain name. It cannot contain back slash (\), slash (/), vertical bar (|), colon (:), asterisk (*), question
mark (?), left angle bracket (<), right angle bracket (>), or at sign (@), and cannot be a, al, or all.
class: Specifies the local user type.
• manage: Device management user, who can configure and monitor the device after login. Device
management users can use FTP, Telnet, SSH, and terminal services.
• network: Network access user, who accesses network resources through the device. Network
access users can use LAN access, portal, and PPP services.
all: Specifies all users.
service-type: Specifies the local users who use a specified type of service.
• ftp: FTP users.
• lan-access: LAN users, mainly users accessing the network through an Ethernet, such as 802.1X
users.
• portal: Portal users.
• ppp: PPP users.
• ssh: SSH users.
• telnet: Telnet users.
• terminal: Terminal users who log in through console, AUX, or async ports.
Usage guidelines
If you do not specify the class { manage | network } option, this command adds a device management
user.
Examples
# Add a device management user named user1.
<Sysname> system-view
[Sysname] local-user user1 class manage
[Sysname-luser-manage-user1]
# Add a network access user named user2.
<Sysname> system-view
[Sysname] local-user user2 class network
[Sysname-luser-network-user2]
Related commands
• display local-user
• service-type