H3C S7500 Series Ethernet Switches Command Manual

Command Manual – Login
H3C S7500 Series Ethernet Switches Chapter 1
Login Commands
1-1
Chapter 1 Login Commands
1.1 Login Commands
1.1.1 authentication-mode
Syntax
authentication-mode { password | scheme [ command-authorization ] | none }
View
User interface view
Parameters
password: Authenticates users with the local password.
scheme: Authenticates users locally or remotely with usernames and passwords.
command-authorization: Performs command authorization on TACACS
authentication server.
none: Does not authenticate users.
Description
Use the authentication-mode command to specify the authentication mode.
z If you specify the password keyword to authenticate users with the local
password, remember to set the local password using the set authentication
password { cipher | simple } password command.
z If you specify the scheme keyword to authenticate users locally or remotely with
usernames and passwords, the actual authentication mode, that is, local or
remote, depends on related configuration.
If this command is executed with the command-authorization keyword, authorization
is performed on the TACACS server whenever you attempt to execute a command, and
the command can be executed only when you pass the authorization. The available
commands are defined on a TACACS server for different users. When you specify to
perform local password authentication on the Console port, users logging in through
the Console port can log into the switch without password; whereas on other user
interfaces, a password needs to be configured for users (such as VTY users) to log into
the switch.
By default, users logging in through the Console port are not authenticated, whereas
modem users and Telnet users are authenticated with password.