Detailed explanation of Telnet remote login AAA mode [Huawei ENSP]

@[toc]

One . Preface

All requirements have been recorded , Now there is only one need ：

9、 To facilitate later management and maintenance, it is necessary to enable the remote login function on the core and convergence layer devices . The authentication method is user name + Password authentication （ User name and password customization ）.

For this demand is still relatively simple , use telnet Remote login aaa Pattern .
Take a look at the topology first ：

Two . The experimental process is as follows

Convergent layer switch LSW6 For example ：
First ： At the same time, it is allowed to establish Telnet Session number range , Five devices are allowed .

user-interface vty 0 4

No password is required for setting local operation

user-interface con 0

Set encryption mode

authentication-mode aaa

Get into aaa

aaa

Set user name and ciphertext password

local-user admin password cipher [email protected]

Set the user's access type to Telnet

local-user admin service-type telnet

see aaa

[sw6-aaa]dis this

explain ：
authentication-scheme default
Is the authentication method ,default Is the default Local authentication is used by default .
authorization-scheme default Or the default authentication method and local device authentication
accounting-scheme default Or the default authentication method and local device authentication
domain default Domain default .

Core layer router configuration ：
First ： At the same time, it is allowed to establish Telnet Session number range , Five devices are allowed .

user-interface vty 0 4

Set encryption mode

authentication-mode aaa

Configure user level

user privilege level 15

Get into aaa View

aaa

Set user name and ciphertext password

local-user admin password cipher [email protected]

Set the user's access type to Telnet

local-user admin service-type telnet

R2 Routers and LSW7 The configuration is the same as above , The configuration is about the same .

testing ：

Remote login succeeded .

[SW]user-interface console 0	// Enter the console interface [SW-ui-console0]authentication-mode aaa	// Select the authentication mode as AAA[SW-ui-console0]quit[SW]aaa	// Get into AAA To configure [SW1-aaa]local-user huawei password cipher hcip	  // Add new user “huawei”, The password for “hcip”[SW1-aaa]local-user huawei service-type terminal  // Set the service type that this user can perform as “Terminal”[SW1-aaa]quit