HP VPN Firewall Appliances Access Control Configuration Guide

233
Figure 138 Network diagram
Configuration procedure
# Assign an IP address to interface GigabitEthernet 0/1, the Telnet user access interface.
<Firewall> system-view
[Firewall] interface gigabitethernet 0/1
[Firewall-GigabitEthernet0/1] ip address 192.168.1.70 255.255.255.0
[Firewall-GigabitEthernet0/1] quit
# Enable the Telnet server on the device.
[Firewall] telnet server enable
# Configure the firewall to use AAA for Telnet users.
[Firewall] user-interface vty 0 4
[Firewall-ui-vty0-4] authentication-mode scheme
[Firewall-ui-vty0-4] quit
# Create local user named telnet.
[Firewall] local-user telnet
[Firewall-luser-telnet] service-type telnet
[Firewall-luser-telnet] password simple aabbcc
[Firewall-luser-telnet] quit
# Configure the AAA methods for the ISP domain as local authentication and authorization.
[Firewall] domain system
[Firewall-isp-system] authentication login local
[Firewall-isp-system] authorization login local
[Firewall-isp-system] quit
Verifying the configuration
A user can Telnet to the user interface of the firewall by using username telnet@system and correct
password.
# Use the display connection command to view the connection information on the firewall.
[Firewall] display connection
Index=1 ,Username=telnet@system
IP=192.168.1.58
IPv6=N/A
Total 1 connection(s) matched.