Configuring an Administrator Using the CLI - In Pratice
Hello everyone,
Today, I would like to introduce in practice a method of creating an administrator account (local authentication) via the CLI.
Procedure:
Create an administrator:
The first step is to enter privileged mode via the "system-view" command:
The next is to configure the UI via the user-interface vty 0 4 and run the authentication mode aaa command to set the authentication mode to AAA.:
The second step is to create a user with admin privilege.
Run the aaa command to access the AAA view and the manager-user user-name command to configure an administrator account and access the administrator view.
In our example we are going to set up an admin account and access the admin view.
Now let's configure the service type, by default no service type is specified for an administrator.
In the example our user will have ssh, terminal and web services.
Finally, let's set up the user's password in the example.
The password chosen for the user is Huawei@123
Set the administrator authention mode to local authentication
Run the authentication scheme scheme name command to create an authentication scheme and access the authentication scheme view.
In the example we will configure the "default" schema in order to simplify.
By default, the authentication scheme is default and the administrator authentication mode is local (local authentication).
Run the authentication mode local command to configure local authentication.
Can we check the other authentication methods via authentication-mode ?:
Configure the permission and other attributes for the administrator account.
The last mandatory step is our user's permission setting.
1: Monitoring level corresponds to Configuration administrator (monitoring).
2: Configuration level corresponds to Configuration administrator.
3: Management level to the 15th level correspond to System administrator.
Finally, our user was configured as follows:
Validating User Access
We will access via CLI through the SSH protocol.
If the settings are correct, access will be made and our user will access the firewall:
Run the command "display users" to verify our user:
With that our practical example was completed.
Cheers,
