HP (Hewlett-Packard) A3100-16-PoE v2 EI ユーザーズマニュアル

ページ / 157
Level Privilege 
Description 
3 Manage 
Involves commands that influence the basic operation of the system and 
commands for configuring system support modules. 
By default, commands at this level involve the configuration commands of file 
system, FTP, TFTP, Xmodem download, user management, level setting, and 
parameter settings within a system (which are not defined by any protocols or 
RFCs). 
 
Configuring a user privilege level 
A user privilege level can be configured by using AAA authentication parameters or under a user 
interface. 
Configure user privilege level by using AAA authentication parameters 
If the user interface authentication mode is scheme, the user privilege level of users logging into the user 
interface is specified in AAA authentication configuration. 
Follow these steps to configure the user privilege level by using AAA authentication parameters: 
To do… 
Use the command… 
Remarks 
Enter system view 
system-view 
— 
Enter user interface view 
user-interface { first-num1 
last-num1 ] | { aux | vty } 
first-num2 last-num2 ] } 
— 
Specify the scheme authentication 
mode 
authentication-mode scheme 
Required 
By default, the authentication 
mode for VTY users is password, 
and no authentication is needed 
for AUX login users. 
Return to system view 
quit 
— 
Configure the authentication mode 
for SSH users as password 
For more information about SSH, 
see the Security Configuration 
Guide. 
Required if users use SSH to log in, 
and username and password are 
needed at authentication 
Using local 
authentication 
• 
Use the local-user command to 
create a local user and enter 
local user view. 
• 
Use the level keyword in the 
authorization-attribute 
command to configure the user 
privilege level. 
Configure the 
user privilege 
level by using 
AAA 
authentication 
parameters 
Using remote 
authentication 
(RADIUS, 
HWTACACS 
authentications) 
Configure the user privilege level 
on the authentication server 
Use either approach 
• 
For local authentication, if you 
do not configure the user 
privilege level, the user 
privilege level is 0. 
• 
For remote authentication, if 
you do not configure the user 
privilege level, the user 
privilege level depends on the 
default configuration of the 
authentication server. 
 
Example of configuring a user privilege level by using AAA authentication parameters 
# You are required to authenticate the users that Telnet to the switch through VTY 1, verify their username 
and password, and specify the user privilege level as 3. 
14