H3C S7500 Series Ethernet Switches Command Manual

Command Manual – AAA & RADIUS & HWTACACS & EAD
H3C S7500 Series Ethernet Switches
Chapter 1 AAA & RADIUS & HWTACACS
Configuration Commands
1-12
 Note:
The commands that a user can access after login are determined by the priority level of
the user and the level set on the user interface. If the two levels are different:
z The command level that a user passing AAA/RADIUS authentication can access is
determined by the priority level of the user. For example, if the priority level of a user
is 3 and the command level set on the VTY 0 user interface is 1, the user can access
the commands under level 3 after logging in to the system from VTY 0.
z The command level that a user passing RSA authentication can access is
determined by the level set on the user interface.
Examples
# Set the user level to 3.
<H3C>system-view
System View: return to User View with Ctrl+Z.
[H3C] local-user aabbcc
[H3C-luser-aabbcc] level 3
1.1.10 local-user
Syntax
local-user user-name
undo local-user { user-name | all [ service-type { telnet | ftp | lan-access | ssh |
terminal } ] }
View
System view
Parameters
user-name: Name of a local user, a character string of up to 80 characters. This string
cannot contain the following characters: /:*?<>. It can contain no more than one @
character. The pure user name (user ID, that is, the part before @) cannot be longer
than 55 characters. The local user name is case insensitive; for example, the system
considers UserA and usera as the same user.
service-type: Specifies the local users of the specified type. You can specify one of the
following user types: telnet, ftp, and lan-access (generally, this type of users are
Ethernet access users, for example, 802.1x users), ssh, and terminal (this type of
users are terminal users who log into the switch through the Console port).
all: Specifies all the local users.