H3C Technologies H3C S7500E Series Switches - Manual (Page 48)

3-9
Configuring Scheme Authentication for Console Login
Configuration prerequisites
You have logged in to the device.
By default, you can log in to the device through the console port without authentication and have user
privilege level 3 after login. For how to log in to the device with default configuration, see Configuration
Requirements .
Configuration procedure
Follow these steps to configure scheme authentication for console login:
To do… Use the command… Remarks
Enters system view system-view —
Enter AUX user interface view
user-interface aux first-number
[ last-number ]
—
Specify the scheme
authentication mode
authentication-mode scheme
Required
Whether local, RADIUS, or
HWTACACS authentication is
adopted depends on the configured
AAA scheme.
By default, users that log in through
the console port are not
authenticated.
Enable command authorization command authorization
Optional
z By default, command
authorization is not enabled.
z By default, the command level
depends on the user privilege
level. A user is authorized a
command level not higher than
the user privilege level. With
command authorization enabled,
the command level for a login
user is determined by both the
user privilege level and AAA
authorization. If a user executes
a command of the corresponding
command level, the
authorization server checks
whether the command is
authorized. If yes, the command
can be executed.