To do...
Use the command...
Remarks
C eate an SSH user, and
r
specify an authentication type
it
ssh user username
authentication-type
{
all
|
password
|
password-publickey
|
publickey
}
specified, the authentication
type specified with the
ssh
user authentication-type
are used and different
authentication types are
command takes precedence.
for
z
z
z
z
a logged-in SSH
user can be configured using the
user privilege level
command on the server, and all the users
with this authentication mode will enjoy this level.
n mode, the level of commands
available to a logged-in SSH user is determined by the AAA scheme. Meanwhile, for different users,
authentication method used for the user.
For
password
authentication type, the
username
argument must be consistent with the valid user
name defined in AAA; for publickey authentication, the
username
argument is the SSH local user
name, so that there is no need to configure a local user in AAA.
If the default authentication type for SSH users is
password
and local AAA authentication is
adopted, you need not use the
ssh user
command to create an SSH user. Instead, you can use
the
local-user
command to create a user name and its password and then set the service type of
the user to SSH.
If the default authentication type for SSH users is password and remote authentication (RADIUS
authentication, for example) is adopted, you need not use the
ssh user
command to create an
SSH user, because it is created on the remote server. And the user can use its username and
password configured on the remote server to access the network.
Under the
publickey
authentication mode, the level of commands available to
z
Under the
password
or
password-publickey
authenticatio
the available levels of commands are also different.
z
Under the
all
authentication mode, the level of commands available to a logged-in SSH user is
determined by the actual
Spec
r
At present, the swit
orts two servi
re Telnet) and SFTP.
z
ce is a basi
SSH protocol. It
s the secure channel of SSH
z
P service is an extend
It u
o
perform remote FTP operations.
ollow these steps to specify the service type for an SSH user:
ifying a Service Type for an SSH User on the Serve
ch supp
ce types for SSH: stelnet (secu
The secure Telnet servi
c application of
use
to provide remote login.
The SFT
ed application of SSH protocol.
ses the secure channel of SSH t
F
To do...
Use the command...
Remarks
Enter system view
system-view
—
Specify a service type for an
SSH user
ssh user username
service-type
{
stelnet
|
sftp
|
all
}
use the service type of
stelnet
.
Required
By default, an SSH user can
