Quidway S3000 Series Operation Manual - page 21
Operation Manual - Security
Quidway S3000 Series Ethernet Switches
Chapter 2 AAA and RADIUS Protocol Configuration
2-6
Table 2-4 Set the method that a local user uses to set password
Operation Command
Set the method that a local user uses to set
password
local-user password-display-mode { cipher-force
| auto }
Cancel the method that the local user uses to
set password
undo local-user password-display-mode
Where, auto means that the password display mode will be the one specified by the
user at the time of configuring password (see the password command in the following
table for reference), and cipher-force means that the password display mode of all the
accessing users must be in cipher text.
Perform the following configurations in local user view.
Table 2-5 Set/Remove the attributes concerned with a specified user
Operation Command
Set a password for a specified
user
password { simple | cipher } password
Remove the password set for
the specified user
undo password
Set the state of the specified
user
state { active | block }
Set a service type for the
specified user ( For S3026)
service-type { telnet [ level level]| ftp [ ftp-directory directory ] |
lan-access }
Cancel the service type of the
specified user ( For S3026)
undo service-type { telnet [ level ]| ftp [ ftp-directory ] |
lan-access }
Set a service type for the
specified user ( Except
S3026)
service-type { ftp [ ftp-directory directory ] | lan-access | ssh [ level
level| telnet [ level level]] | telnet [ level level | ssh [ level level ] ]}
Cancel the service type of the
specified user ( Except
S3026)
undo service-type { ftp [ ftp-directory ] | lan-access | ssh [ level |
telnet [ level ] ] | telnet [ level | ssh [ level ] ]}
Configure the attributes of
lan-access users
attribute { ip ip-address| mac mac-address| idle-cut second |
access-limit max-user-number| vlan vlanid| location { nas-ip
ip-address port portnum | port portnum } }*
Remove the attributes
defined for the lan-access
users
undo attribute { ip | mac | idle-cut | access-limit | vlan | location }*
2.2.5 Disconnect a User by Force
Sometimes it is necessary to disconnect a user or a category of users by force. The
system provides the following command to serve for this purpose.
Perform the following configurations in system view.