H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 32)

18
the local user account, the user cannot pass authentication. Binding attributes include the IP
address, access port, MAC address, and native VLAN. For more information about binding
attributes, see "
Configuring local user attributes ." Be cautious when deciding which binding
attributes to configure for a local user.
• Authorization attributes
Authorization attributes indicate the rights that a user has after passing local authentication.
Authorization attributes include the ACL, PPP callback number, idle cut function, user level, user
role, user profile, VLAN, and FTP/SFTP work directory. For more information about authorization
attributes, see " Configuring local user attributes ."
Every configurable authorization attribute has its definite application environments and purposes.
When configuring authorization attributes for a local user, consider which attributes are needed
and which are not. For example, for PPP users, you do not need to configure the work directory
attribute.
You can configure an authorization attribute in user group view or local user view, making the
attribute effective for all local users in the group or for only the local user. The setting of an
authorization attribute in local user view takes precedence over that in user group view.
Local user configuration task list
Task Remarks
Configuring local user attributes Required
Configuring user group attributes Optional
Displaying and maintaining local users and local user groups Optional
Configuring local user attributes
Step Command Remarks
1. Enter system view. system-view N/A
2. Set the password display
mode for all local users.
local-user
password-display-mode { auto |
cipher-force }
Optional.
The default setting is auto, indicating
the local user passwords are
displayed in the way defined by the
password command.
3. Add a local user and enter
local user view.
local-user user-name No local user exists by default.
4. Configure a password for
the local user.
password { cipher | simple }
password
Optional.
If you do not configure any password
for a local user, the local user does
not need to provide any password
during authentication, and can pass
authentication after entering the
correct local user name and passing
attribute checks. To achieve higher
security, configure a password for
each local user.