Local authentication and authorization for Telnet users

As shown in Figure 12, configure the switch to perform local authentication and authorization for Telnet users.

# Assign IP addresses to interfaces. (Details not shown.)

# Configure the IP address of VLAN-interface 2.

<Switch> system-view
[Switch] interface vlan-interface 2
[Switch-Vlan-interface2] ip address 192.168.1.70 255.255.255.0
[Switch-Vlan-interface2] quit

# Enable the Telnet server on the switch.

[Switch] telnet server enable

# Configure the switch to use AAA for Telnet users.

[Switch] user-interface vty 0 15
[Switch-ui-vty0-15] authentication-mode scheme
[Switch-ui-vty0-15] quit

# Create a local user named hello.

[Switch] local-user hello
[Switch-luser-hello] service-type telnet
[Switch-luser-hello] password simple hello
[Switch-luser-hello] quit

# Configure authentication and authorization methods for the ISP domain.

[Switch] domain bbb
[Switch-isp-bbb] authentication login local
[Switch-isp-bbb] authorization login local
[Switch-isp-bbb] quit

Telnet to the switch, and enter the username hello@bbb and the correct password. You pass authentication and log in to the switch. Use the display connection command on the switch to see information about the user connection.

[Switch] display connection

Index=0   , Username=hello@bbb
 IP=192.168.1.58
 IPv6=N/A
 Total 1 connection(s) matched.