H3C Technologies H3C S3100 Series Switches - Manual (Page 63)

Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 3 Logging in through Telnet
3-12
Note that if you configure to authenticate the users in the scheme mode, the command
level available to users logging into a switch depends on the authentication-mode
scheme
[ command-authorization ] command, the user privilege level level
command, and the service-type { ftp | lan-access | { ssh | telnet | terminal }* [ level
level
] } command, as listed in Table 3-9.
Table 3-9
Determine the command level when users logging into switches are
authenticated in the scheme mode
Scenario
Authenticati
on mode
User type Command
Command
level
The user privilege level level
command is not executed, and
the service-type command does
not specify the available
command level.
Level 0
The user privilege level level
command is not executed, and
the service-type command
specifies the available command
level.
Determined
by the
service-typ
e
command
The user privilege level level
command is executed, and the
service-type
command does not
specify the available command
level.
Level 0
authenticatio
n-mode
scheme
[ command-a
uthorization
]
VTY users that
are
AAA&RADIUS
authenticated
or locally
authenticated
The user privilege level level
command is executed, and the
service-type
command specifies
the available command level.
Determined
by the
service-typ
e
command