H3C Technologies H3C SecPath F1000-E User Manual

Page 238

228

# Configure the IP address of GigabitEthernet 0/2, through which SecPath communicates with the server.

[SecPath] interface GigabitEthernet 0/2

[SecPath-GigabitEthernet0/2] ip address 10.1.1.2 255.255.255.0

[SecPath-GigabitEthernet0/2] quit

# Enable SecPath to provide Telnet service.

[SecPath] telnet server enable

# Configure SecPath to use AAA for Telnet users.

[SecPath] user-interface vty 0 4

[SecPath-ui-vty0-4] authentication-mode scheme

[SecPath-ui-vty0-4] quit

# Use RADIUS authentication for user privilege level switching authentication and, if RADIUS

authentication is not available, use local authentication.

[SecPath] super authentication-mode scheme local

# Create RADIUS scheme rad.

[SecPath] radius scheme rad

# Specify the IP address of the primary authentication server as 10.1.1.1, and the port for authentication
as 1812.

[SecPath-radius-rad] primary authentication 10.1.1.1 1812

# Set the shared key for authenticating authentication packets to expert.

[SecPath-radius-rad] key authentication expert

# Specify the service type of the RADIUS server as standard.

[SecPath-radius-rad] server-type standard

# Specify the scheme to exclude the domain names from usernames to be sent to the RADIUS server.

[SecPath-radius-rad] user-name-format without-domain

[SecPath-radius-rad] quit

# Create ISP domain bbb.

[SecPath] domain bbb

# Configure the AAA methods for domain bbb as local authentication.

[SecPath-isp-bbb] authentication login local

# Configure the domain to use the RADIUS scheme rad for user privilege level switching authentication.

[SecPath-isp-bbb] authentication super radius-scheme rad

[SecPath-isp-bbb] quit

# Create a local Telnet user named test.

[SecPath] local-user test

[SecPath-luser-test] service-type telnet

[SecPath-luser-test] password simple aabbcc

# Configure the user level of the Telnet user to 0 after user login.

[SecPath-luser-test] authorization-attribute level 0

[SecPath-luser-test] quit

# Configure the password for local level switching authentication to 654321.

[SecPath] super password simple 654321

[SecPath] quit

This manual is related to the following products: