Switch 7700 Configuration Guide, v2

252 CHAPTER 9: AAA AND RADIUS OPERATION
Perform the following configurations in system view.
By default, there is no local user in the system.
Setting Attributes of a Local User
The attributes of a local user include its password, state, service type and some
other settings.
Perform the following configurations in system view.
Where, auto means that the password display mode will be the one specified by
the user at the time of configuring password (see the password command in the
following table for reference), and cipher-force means that the password display
mode of all the accessing users must be in cipher text.
Perform the following configurations in local user view.
Tab le 15 Create/Delete a Local User and Relevant Properties
Operation Command
Add local users local-user user-name
Delete all the local users undo local-user all
Delete a local user by
specifying its type
undo local-user {user-name | all [service-type {lan-access |
ftp | telnet}]}
Tab le 16 Set the Method that a Local User Uses to Set Password
Operation Command
Set the method that a local
user uses to set password
local-user password-display-mode { cipher-force | auto}
Cancel the method that the
local user uses to set password
undo local-user password-display-mode
Tab le 17 Set/Remove the Attributes Concerned with a Specified User
Operation Command
Set a password for a specified
user
password {simple | cipher} password
Remove the password set for
the specified user
undo password
Set the state of the specified
user
state {active | block}
Disable the state of the
specified user
undo state {active | block}
Set a service type for the
specified user
service-type { telnet [level level] | ftp [ftp-directory
directory ] | lan-access}
Cancel the service type of the
specified user
undo service-type {telnet [ level] | ftp [ftp-directory] |
lan-access}
Configure the attributes of
lan-access users
attribute {ip ip-address | mac mac-address | idle-cut second |
access-limit max-user-number | vlan vlanid | location
[nas-ip ip-address] port portnum}
Remove the attributes defined
for the lan-access users
undo attribute {ip | mac | idle-cut | access-limit | vlan |
location }