R0106-HP MSR Router Series Fundamentals Configuration Guide(V7)

{ For other users, the device assigns user roles according to the user role configuration made on

the AAA module. If the AAA server does not assign any user role and the default user role

function is disabled, a remote AAA authentication user cannot log in.

FIPS compliance

The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,

commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about

FIPS mode, see Security Configuration Guide.

Telnet login is not supported in FIPS mode.

Logging in through the console/AUX port locally

You can connect a terminal to the console or AUX port of the device to log in and manage the device,

as shown in Figure 12 and Figure 13. For the login procedure, see "Logging in through the console port

r the first device access."

Figure 12 Logging in through the console port

Figure 13 Logging in through the console or AUX port

By default, console login is enabled and does not require authentication. To improve device security,

configure password or scheme authentication mode and assign user roles immediately after you log in

to the device for the first time.

By default, login through the AUX port is enabled and requires a password, but no password is

configured. To log in to the device locally through the AUX port, you must first log in to the device through

any other method and configure AUX login.

To configure console/AUX login, complete the following tasks:

Task Remarks

(Required.) Configuring login authentication:

• Disabling authentication for console/AUX login

• Configuring password authentication for console/AUX login

• Configuring scheme authentication for console/AUX login

Configure one authentication mode as

required.

In FIPS mode, only the scheme

authentication mode is supported.

(Optional.) Configuring common console/AUX line settings N/A

The console/AUX login configuration is effective only for users who log in after the configuration is

completed.