H3C Technologies H3C S7500E Series Switches - Manual (Page 30)

1-19
Configure the user privilege level under a user interface
z If the user interface authentication mode is scheme when a user logs in, and SSH publickey
authentication type (only username is needed for this authentication type) is adopted, the user
privilege level is the user interface level.
z If the authentication mode of a user interface is scheme, and SSH publickey authentication type
(only username is needed for this authentication type) is adopted, the user privilege level of users
logging into the user interface is the user interface level.
z If the authentication mode of a user interface is none or password, the user privilege level of users
logging into the user interface is the user interface level.
Follow these steps to configure the user privilege level under a user interface (SSH publickey
authentication type):
To do… Use the command… Remarks
Configure the authentication type
for SSH users as publickey
For more information, see SSH2.0
Configuration in the Security
Configuration Guide.
Required if the SSH login mode is
adopted, and only username is
needed during authentication.
After the configuration, the
authentication mode of the
corresponding user interface must
be set to scheme.
Enter system view system-view —
Enter user interface view
user-interface { first-num1
[ last-num1 ] | vty first-num2
[ last-num2 ] }
—
Configure the authentication mode
for any user that uses the current
user interface to log in to the
switch
authentication-mode scheme
Optional
By default, the authentication
mode for VTY and AUX users is
password, and no authentication
is needed for AUX users.
Configure the privilege level for
users that log in through the
current user interface
user privilege level level
Optional
By default, the user privilege level
for users logged in through the
console user interface is 3, and
that for users logged in through the
other user interfaces is 0.
Follow these steps to configure the user privilege level under a user interface (none or password
authentication mode):
To do… Use the command… Remarks
Enter system view system-view —