18Default command level3: Manage levelParametersnone: Performs no authentication. This keyword is not supported in FIPS mode.password: Performs local password authentication. This keyword is not supported in FIPS mode.scheme: Performs AAA authentication. For more information about AAA, see Security ConfigurationGuide.Usage guidelinesFor scheme authentication mode, if local authentication is used and password control is enabled, a usermust change the password after the first login (unless the user uses SSH for the first login). If NTPsynchronization is also configured, H3C recommends that you wait 10 minutes before changing thepassword. Otherwise, NTP synchronization might not be finished when the password is created.Examples# Specify that no authentication is needed for VTY 0. (This mode is insecure.) system-view[Sysname] user-interface vty 0[Sysname-ui-vty0] authentication-mode none# Use password authentication when users log in to the device through VTY 0, and set the authenticationpassword to 321. system-view[Sysname] user-interface vty 0[Sysname-ui-vty0] authentication-mode password[Sysname-ui-vty0] set authentication password simple 321# Authenticate users by username and password for VTY 0. Set the username to 123 and the passwordto 321. system-view[Sysname] user-interface vty 0[Sysname-ui-vty0] authentication-mode scheme[Sysname-ui-vty0] quit[Sysname] local-user 123[Sysname-luser-123] password simple 321[Sysname-luser-123] service-type telnet[Sysname-luser-123] authorization-attribute level 3Related commandsset authentication passwordcommand accountingUse command accounting to enable command accounting.Use undo command accounting to restore the default.Syntaxcommand accountingundo command accounting
