HP 200 Unified Threat Management (UTM) Appliance Series Guía de inicio rápido descargar pdf (Pagina 31)

25

Ste

p

Command

Remarks

3. Enable scheme

authentication.

authentication-mode scheme

Whether local, RADIUS, or

HWTACACS authentication is

adopted depends on the configured

AAA scheme.

By default, console login users are

not authenticated.

4. Enable command

authorization.

command authorization

Optional.

By default, command authorization

is disabled. The commands

available for a user only depend on

the user privilege level.

5. Enable command

accounting.

command accounting

Optional.

By default, command accounting is

disabled. The accounting server

does not record the commands

executed by users.

6. Exit to system view.

quit N/A

7. Apply an AAA

authentication scheme to

the intended domain.

a. Enter ISP domain view:

domain domain-name

b. Apply an AAA scheme to

the domain:

authentication default

{ hwtacacs-scheme

hwtacacs-scheme-name

[ local ] | local | none |

radius-scheme

radius-scheme-name

[ local ] }

c. Exit to system view:

quit

Optional.

By default, local authentication is

used.

For local authentication, configure

local user accounts.

For RADIUS or HWTACACS

authentication, configure the

RADIUS or HWTACACS scheme on

the device and configure

authentication settings (including the

username and password) on the

server.

For more information about AAA

configuration, see Access Control

Configuration Guide.

8. Create a local user and

enter local user view.

local-user user-name

By default, a local user named

admin exists.

9. Set an authentication

password for the local user.

password { cipher | simple }

password

By default, the password for

system-predefined user admin is

admin, and no password is set for

any other local user.

10. Specifies a command level

of the local user.

authorization-attribute level level

Optional.

By default, the command level is 0.

11. Specify terminal service for

the local user.

service-type terminal

By default, the system-predefined

user admin can use terminal service,

Telnet service, SSH service, and

Web service, and no service type is

specified for any other local user.

12. Configure common settings

for console login.

See "Configuring common console

user interface settings (optional)."

Optional.

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 149 150

Comentarios a estos manuales

Sin comentarios