R0106-HP MSR Router Series Security Command Reference(V7)

40
Use undo local-user to remove local users.
Syntax
local-user user-name [ class { manage | network } ]
undo local-user { user-name class { manage | network } | all [ service-type { ftp | lan-access |portal |
ppp | ssh | telnet | terminal } | class { manage | network } ] }
Default
No local user exists.
Views
System view
Predefined user roles
network-admin
Parameters
user-name: Name for the local user, a case-sensitive string of 1 to 55 characters that does not contain the
domain name. A local user name cannot contain a forward slash (/), backslash (\), vertical bar (|),
colon (:), asterisk (*), question mark (?), left angle bracket (<), right angle bracket (>), or at sign (@). The
name cannot be a, al, or all, either.
class: Specifies the local user type.
• manage: Device management user who can configure and monitor the device after login. Device
management users can use FTP, Telnet, SSH, and terminal services.
• network: Network access user who accesses network resources through the device. Network
access users can use LAN access, portal, and PPP services.
all: Specifies all users.
service-type: Specifies the local users who use a specific type of service.
• ftp: FTP users.
• lan-access: LAN users who typically access the network through an Ethernet, such as 802.1X users.
• portal: Portal users.
• ppp: PPP users.
• ssh: SSH users.
• telnet: Telnet users.
• terminal: Terminal users who log in through console ports, AUX ports, or async ports.
Usage guidelines
If you do not specify the class { manage | network } option, this command adds a device management
user.
Examples
# Add a device management user named user1.
<Sysname> system-view
[Sysname] local-user user1 class manage
[Sysname-luser-manage-user1]
# Add a network access user named user2.
<Sysname> system-view