H3C S3100-52P Operating instructions

Category
Network switches
Type
Operating instructions
Operation Manual – Login
H3C S3100-52P Ethernet Switch Table of Contents
i
Table of Contents
Chapter 1 Logging into an Ethernet Switch ...............................................................................1-1
1.1 Logging into an Ethernet Switch........................................................................................1-1
1.2 Introduction to the User Interface ...................................................................................... 1-1
1.2.1 Supported User Interfaces......................................................................................1-1
1.2.2 User Interface Number............................................................................................1-1
1.2.3 Common User Interface Configuration ...................................................................1-2
Chapter 2 Logging in through the Console Port........................................................................2-1
2.1 Introduction........................................................................................................................2-1
2.2 Logging in through the Console Port.................................................................................2-1
2.3 Console Port Login Configuration......................................................................................2-3
2.3.1 Common Configuration........................................................................................... 2-3
2.3.2 Console Port Login Configurations for Different Authentication Modes..................2-4
2.4 Console Port Login Configuration with Authentication Mode Being None........................ 2-6
2.4.1 Configuration Procedure.........................................................................................2-6
2.4.2 Configuration Example............................................................................................2-8
2.5 Console Port Login Configuration with Authentication Mode Being Password.................2-9
2.5.1 Configuration Procedure.........................................................................................2-9
2.5.2 Configuration Example..........................................................................................2-11
2.6 Console Port Login Configuration with Authentication Mode Being Scheme..................2-13
2.6.1 Configuration Procedure.......................................................................................2-13
2.6.2 Configuration Example..........................................................................................2-15
Chapter 3 Logging in through Telnet.......................................................................................... 3-1
3.1 Introduction........................................................................................................................3-1
3.1.1 Common Configuration........................................................................................... 3-1
3.1.2 Telnet Configurations for Different Authentication Modes ...................................... 3-2
3.2 Telnet Configuration with Authentication Mode Being None.............................................3-4
3.2.1 Configuration Procedure.........................................................................................3-4
3.2.2 Configuration Example............................................................................................3-5
3.3 Telnet Configuration with Authentication Mode Being Password......................................3-7
3.3.1 Configuration Procedure.........................................................................................3-7
3.3.2 Configuration Example............................................................................................3-8
3.4 Telnet Configuration with Authentication Mode Being Scheme ......................................3-10
3.4.1 Configuration Procedure.......................................................................................3-10
3.4.2 Configuration Example.......................................................................................... 3-14
3.5 Telneting to a Switch .......................................................................................................3-15
3.5.1 Telneting to a Switch from a Terminal...................................................................3-15
3.5.2 Telneting to another Switch from the Current Switch............................................3-18
Operation Manual – Login
H3C S3100-52P Ethernet Switch Table of Contents
ii
Chapter 4 Logging in Using Modem............................................................................................ 4-1
4.1 Introduction........................................................................................................................4-1
4.2 Configuration on the Administrator Side............................................................................4-1
4.3 Configuration on the Switch Side.......................................................................................4-1
4.3.1 Modem Configuration.............................................................................................. 4-1
4.3.2 Switch Configuration............................................................................................... 4-2
4.4 Modem Connection Establishment....................................................................................4-3
Chapter 5 Logging in through Web-based Network Management System............................. 5-1
5.1 Introduction........................................................................................................................5-1
5.2 HTTP Connection Establishment.......................................................................................5-1
5.3 Web Server Shutdown/Startup.......................................................................................... 5-2
Chapter 6 Logging in through NMS............................................................................................. 6-1
6.1 Introduction........................................................................................................................6-1
6.2 Connection Establishment Using NMS..............................................................................6-1
Chapter 7 Configuring Source IP Address for Telnet Service Packets................................... 7-1
7.1 Configuring Source IP Address for Telnet Service Packets..............................................7-1
7.2 Displaying Source IP Address Configuration.....................................................................7-2
Chapter 8 User Control.................................................................................................................8-1
8.1 Introduction........................................................................................................................8-1
8.2 Controlling Telnet Users.................................................................................................... 8-1
8.2.1 Prerequisites ........................................................................................................... 8-1
8.2.2 Controlling Telnet Users by Source IP Addresses.................................................. 8-1
8.2.3 Controlling Telnet Users by Source and Destination IP Addresses........................ 8-2
8.2.4 Controlling Telnet Users by Source MAC Addresses.............................................8-3
8.2.5 Configuration Example............................................................................................8-4
8.3 Controlling Network Management Users by Source IP Addresses...................................8-5
8.3.1 Prerequisites ........................................................................................................... 8-5
8.3.2 Controlling Network Management Users by Source IP Addresses ........................8-5
8.3.3 Configuration Example............................................................................................8-7
8.4 Controlling Web Users by Source IP Address...................................................................8-7
8.4.1 Prerequisites ........................................................................................................... 8-8
8.4.2 Controlling Web Users by Source IP Addresses ....................................................8-8
8.4.3 Disconnecting a Web User by Force ......................................................................8-8
8.4.4 Configuration Example............................................................................................8-9
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 1
Logging into an Ethernet Switch
1-1
Chapter 1 Logging into an Ethernet Switch
1.1 Logging into an Ethernet Switch
You can log into an S3100-52P Ethernet switch in one of the following ways:
z Logging in locally through the Console port
z Telneting locally or remotely to an Ethernet port
z Telneting to the Console port using a modem
z Logging into the Web-based network management system
z Logging in through NMS (network management station)
1.2 Introduction to the User Interface
1.2.1 Supported User Interfaces
S3100-52P Ethernet switch support two types of user interfaces: AUX and VTY.
Table 1-1 Description on user interface
User interface Applicable user Port used Description
AUX
Users logging in
through the Console
port
Console port
Each switch can
accommodate one AUX
user.
VTY
Telnet users and
SSH users
Ethernet port
Each switch can
accommodate up to five
VTY users.
Note:
The AUX port and the Console port of a H3C series Ethernet switch are the same port.
You will be in the AUX user interface if you log in through this port.
1.2.2 User Interface Number
Two kinds of user interface index exist: absolute user interface index and relative user
interface index.
1) The absolute user interface indexes are as follows:
z AUX user interface: 0
z VTY user interfaces: Numbered after AUX user interfaces and increases in the
step of 1
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 1
Logging into an Ethernet Switch
1-2
2) A relative user interface index can be obtained by appending a number to the
identifier of a user interface type. It is generated by user interface type. The
relative user interface indexes are as follows:
z AUX user interface: AUX 0
z VTY user interfaces: VTY 0, VTY 1, VTY 2, and so on.
1.2.3 Common User Interface Configuration
Table 1-2 Common user interface configuration
Operation Command Description
Lock the current user
interface
lock
Optional
Execute this command in
user view.
A user interface is not locked
by default.
Specify to send
messages to all user
interfaces/a specified
user interface
send { all | number |
type number }
Optional
Execute this command in
user view.
Disconnect a specified
user interface
free user-interface
[ type ] number
Optional
Execute this command in
user view.
Enter system view
system-view
Enter user interface
view
user-interface [ type ]
first-number
[ last-number ]
Set the command that is
automatically executed
when a user logs into
the user interface
auto-execute
command text
Optional
By default, no command is
automatically executed when
a user logs into a user
interface.
Display the information
about the current user
interface/all user
interfaces
display users [ all ]
Display the physical
attributes and
configuration of the
current/a specified user
interface
display user-interface
[ type number | number ]
Display the information
about the current web
users
display web users
Optional
You can execute the display
command in any view.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 1
Logging into an Ethernet Switch
1-3
Caution:
z The auto-execute command command may cause you unable to perform common
configuration in the user interface, so use it with caution.
z Before executing the auto-execute command command and save your
configuration, make sure you can log into the switch in other modes and cancel the
configuration.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-1
Chapter 2 Logging in through the Console Port
2.1 Introduction
To log in through the Console port is the most common way to log into a switch. It is also
the prerequisite to configure other login methods. Normally, you can log into an
S3100-52P Ethernet switch through its Console port.
To log into an Ethernet switch through its Console port, the communication
configuration of the user terminal must be in accordance with that of the Console port.
Table 2-1 lists the default settings of a Console port.
Table 2-1 The default settings of a Console port
Setting Default
Baud rate 9,600 bps
Flow control None
Check mode (Parity) None
Stop bits 1
Data bits 8
After logging into a switch, you can perform configuration for AUX users. Refer to
section
2.3 Console Port Login Configuration” for more.
2.2 Logging in through the Console Port
Following are the procedures to connect to a switch through the Console port.
1) Connect the serial port of your PC/terminal to the Console port of the switch, as
shown in
Figure 2-1.
Console port
RS-232 port
Configuration cable
Console port
RS-232 port
Configuration cable
Figure 2-1 Diagram for setting the connection to the Console port
2) If you use a PC to connect to the Console port, launch a terminal emulation utility
(such as Terminal in Windows 3.X or HyperTerminal in Windows 9X) and perform
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-2
the configuration shown in Figure 2-2 through Figure 2-4 for the connection to be
created. Normally, the parameters of a terminal are configured as those listed in
Table 2-1. And the type of the terminal is set to VT100.
Figure 2-2 Create a connection
Figure 2-3 Specify the port used to establish the connection
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-3
Figure 2-4 Set port parameters
3) Turn on the switch. You will be prompted to press the Enter key if the switch
successfully completes POST (power-on self test). The prompt (such as <H3C>)
appears after you press the Enter key.
4) You can then configure the switch or check the information about the switch by
executing the corresponding commands. You can also acquire help by typing the ?
character. The commands available on a switch are described in the command
manuals.
2.3 Console Port Login Configuration
2.3.1 Common Configuration
Table 2-2 lists the common configuration of Console port login.
Table 2-2 Common configuration of Console port login
Configuration Remarks
Baud rate
Optional
The default baud rate is 9,600 bps.
Check mode
Optional
By default, the check mode of the Console
port is set to “none”, which means no check
bit.
Stop bits
Optional
The default stop bits of a Console port is 1.
Console port
configuration
Data bits
Optional
The default data bits of a Console port is 8.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-4
Configuration Remarks
AUX user
interface
configuration
Configure the
command level
available to the users
logging into the AUX
user interface
Optional
By default, commands of level 3 are
available to the users logging into the AUX
user interface.
Make terminal
services available
Optional
By default, terminal services are available in
all user interfaces
Set the maximum
number of lines the
screen can contain
Optional
By default, the screen can contain up to 24
lines.
Set history command
buffer size
Optional
By default, the history command buffer can
contain up to 10 commands.
Terminal
configuration
Set the timeout time
of a user interface
Optional
The default timeout time is 10 minutes.
Caution:
Changing of Console port configuration terminates the connection to the Console port.
To establish the connection again, you need to modify the configuration of the
termination emulation utility running on your PC accordingly. Refer to section
2.2
Logging in through the Console Port” for more.
2.3.2 Console Port Login Configurations for Different Authentication Modes
Table 2-3 lists Console port login configurations for different authentication modes.
Table 2-3 Console port login configurations for different authentication modes
Authentication
mode
Console port login
configuration
Remarks
None
Perform
common
configuration
Perform common
configuration for
Console port
login
Optional
Refer to section
2.3.1
Common Configuration” for
more.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-5
Authentication
mode
Console port login
configuration
Remarks
Configure the
password
Configure the
password for
local
authentication
Required
Password
Perform
common
configuration
Perform common
configuration for
Console port
login
Optional
Refer to section
2.3.1
Common Configuration” for
more.
Specify to
perform local
authenticatio
n or RADIUS
authenticatio
n
AAA
configuration
specifies whether
to perform local
authentication or
RADIUS
authentication
Optional
Local authentication is
performed by default.
Refer to the
AAA&RADIUS&HWTACAC
S&EAD module for more.
Configure
user name
and
password
Configure user
names and
passwords for
local/RADIUS
users
Required
z The user name and
password of a local user
are configured on the
switch.
z The user name and
password of a RADIUS
user are configured on
the RADIUS server.
Refer to user manual of
RADIUS server for
more.
Manage AUX
users
Set service type
for AUX users
Required
Scheme
Perform
common
configuration
Perform common
configuration for
Console port
login
Optional
Refer to section
2.3.1
Common Configuration” for
more.
Note:
Changes of the authentication mode of Console port login will not take effect unless
you quit the command-line interface and then enter it again.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-6
2.4 Console Port Login Configuration with Authentication
Mode Being None
2.4.1 Configuration Procedure
Table 2-4 Console port login configuration with the authentication mode being none
Operation Command Description
Enter system view
system-view
Enter AUX user interface view user-interface aux 0
Configure not to authenticate
users
authentication-mode
none
Required
By default, users
logging in through
the Console port are
not authenticated.
Set the baud
rate
speed speed-value
Optional
The default baud
rate of an AUX port
(also the Console
port) is 9,600 bps.
Set the check
mode
parity { even | none |
odd }
Optional
By default, the check
mode of a Console
port is set to none,
that is, no check bit.
Set the stop
bits
stopbits { 1 | 1.5 | 2 }
Optional
The stop bits of a
Console port is 1.
Configure the
Console port
Set the data
bits
databits { 7 | 8 }
Optional
The default data bits
of a Console port is
8.
Configure the command level
available to users logging into
the user interface
user privilege level level
Optional
By default,
commands of level 3
are available to
users logging into
the AUX user
interface.
Make terminal services
available
shell
Optional
By default, terminal
services are
available in all user
interfaces.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-7
Operation Command Description
Set the maximum number of
lines the screen can contain
screen-length
screen-length
Optional
By default, the
screen can contain
up to 24 lines.
You can use the
screen-length 0
command to disable
the function to
display information
in pages.
Set the history command buffer
size
history-command
max-size value
Optional
The default history
command buffer size
is 10. That is, a
history command
buffer can store up
to 10 commands by
default.
Set the timeout time for the
user interface
idle-timeout minutes
[ seconds ]
Optional
The default timeout
time of a user
interface is 10
minutes.
With the timeout
time being 10
minutes, the
connection to a user
interface is
terminated if no
operation is
performed in the
user interface within
10 minutes.
You can use the
idle-timeout 0
command to disable
the timeout function.
Note that the command level available to users logging into a switch depends on both
the authentication-mode none command and the user privilege level level
command, as listed in the following table.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-8
Table 2-5 Determine the command level (A)
Scenario
Authentication
mode
User type Command
Command
level
The user privilege level
level command not executed
Level 3
None
(authentication-
mode none)
Users
logging in
through
Console port
The user privilege level
level command already
executed
Determined
by the level
argument
2.4.2 Configuration Example
I. Network requirements
Assume that you are a level 3 VTY user and want to perform the following configuration
for users logging in through the Console port:
z Do not authenticate users logging in through the Console port.
z Commands of level 2 are available to users logging into the AUX user interface.
z The baud rate of the Console port is 19,200 bps.
z The screen can contain up to 30 lines.
z The history command buffer can contain up to 20 commands.
z The timeout time of the AUX user interface is 6 minutes.
II. Network diagram
User PC running Telnet
Ethernet1/0/1
Eth er net
User PC running Telnet
Ethernet1/0/1
Eth er net
Figure 2-5 Network diagram for AUX user interface configuration (with th
authentication mode being none)
e
III. Configuration procedure
# Enter system view.
<H3C> system-view
# Enter AUX user interface view.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-9
[H3C] user-interface aux 0
# Specify not to authenticate users logging in through the Console port.
[H3C-ui-aux0] authentication-mode none
# Specify commands of level 2 are available to users logging into the AUX user
interface.
[H3C-ui-aux0] user privilege level 2
# Set the baud rate of the Console port to 19,200 bps.
[H3C-ui-aux0] speed 19200
# Set the maximum number of lines the screen can contain to 30.
[H3C-ui-aux0] screen-length 30
# Set the maximum number of commands the history command buffer can store to 20.
[H3C-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[H3C-ui-aux0] idle-timeout 6
2.5 Console Port Login Configuration with Authentication
Mode Being Password
2.5.1 Configuration Procedure
Table 2-6 Console port login configuration with the authentication mode being
password
Operation Command Description
Enter system view
system-view
Enter AUX user
interface view
user-interface aux
0
Configure to
authenticate users
using the local
password
authentication-mo
de password
Required
By default, users logging into a
switch through the Console port
are not authenticated; while those
logging in through Modems or
Telnet are authenticated.
Set the local password
set authentication
password { cipher |
simple } password
Required
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-10
Operation Command Description
Set the
baud rate
speed speed-value
Optional
The default baud rate of an AUX
port (also the Console port) is
9,600 bps.
Set the
check
mode
parity { even | none
| odd }
Optional
By default, the check mode of a
Console port is set to none, that
is, no check bit.
Set the
stop bits
stopbits { 1 | 1.5 |
2 }
Optional
The default stop bits of a Console
port is 1.
Configure
the
Console
port
Set the
data bits
databits { 7 | 8 }
Optional
The default data bits of a Console
port is 8.
Configure the command
level available to users
logging into the user
interface
user privilege level
level
Optional
By default, commands of level 3
are available to users logging into
the AUX user interface.
Make terminal services
available to the user
interface
shell
Optional
By default, terminal services are
available in all user interfaces.
Set the maximum
number of lines the
screen can contain
screen-length
screen-length
Optional
By default, the screen can contain
up to 24 lines.
You can use the screen-length 0
command to disable the function
to display information in pages.
Set history command
buffer size
history-command
max-size value
Optional
The default history command
buffer size is 10. That is, a history
command buffer can store up to
10 commands by default.
Set the timeout time for
the user interface
idle-timeout
minutes [ seconds ]
Optional
The default timeout time of a user
interface is 10 minutes.
With the timeout time being 10
minutes, the connection to a user
interface is terminated if no
operation is performed in the user
interface within 10 minutes.
You can use the idle-timeout 0
command to disable the timeout
function.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-11
Note that the level the commands of which are available to users logging into a switch
depends on both the authentication-mode password and the user privilege level
level command, as listed in the following table.
Table 2-7 Determine the command level (B)
Scenario
Authentication
mode
User type Command
Command
level
The user privilege level
level command is not
executed
Level 3
Local authentication
(authentication-m
ode password)
Users logging in
through
Console port
The user privilege level
level command is
already executed
Determined
by the level
argument
2.5.2 Configuration Example
I. Network requirements
Assume that you are a level 3 VTY user and want to perform the following configuration
for users logging in through the Console port:
z Authenticate users logging in through the Console port using the local password.
z Set the local password to 123456 (in plain text).
z The commands of level 2 are available to users logging into the AUX user
interface.
z The baud rate of the Console port is 19,200 bps.
z The screen can contain up to 30 lines.
z The history command buffer can store up to 20 commands.
z The timeout time of the AUX user interface is 6 minutes.
II. Network diagram
User PC running Telnet
Ethernet1/0/1
Ethernet
User PC running Telnet
Ethernet1/0/1
Ethernet
Figure 2-6 Network diagram for AUX user interface configuration (with the
authentication mode being
password)
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-12
III. Configuration procedure
# Enter system view.
<H3C> system-view
# Enter AUX user interface view.
[H3C] user-interface aux 0
# Specify to authenticate users logging in through the Console port using the local
password.
[H3C-ui-aux0] authentication-mode password
# Set the local password to 123456 (in plain text).
[H3C-ui-aux0] set authentication password simple 123456
# Specify commands of level 2 are available to users logging into the AUX user
interface.
[H3C-ui-aux0] user privilege level 2
# Set the baud rate of the Console port to 19,200 bps.
[H3C-ui-aux0] speed 19200
# Set the maximum number of lines the screen can contain to 30.
[H3C-ui-aux0] screen-length 30
# Set the maximum number of commands the history command buffer can store to 20.
[H3C-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[H3C-ui-aux0] idle-timeout 6
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-13
2.6 Console Port Login Configuration with Authentication
Mode Being Scheme
2.6.1 Configuration Procedure
Table 2-8 Console port login configuration with the authentication mode being scheme
Operation Command Description
Enter system view
system-view
Enter the
default ISP
domain view
domain
domain-name
Specify the
AAA scheme
to be applied
to the
domain
scheme { local |
none |
radius-scheme
radius-scheme-name
[ local ] |
hwtacacs-scheme
hwtacacs-scheme-n
ame [ local ] }
Configur
e the
authentic
ation
mode
Quit to
system view
quit
Optional
By default, the local AAA
scheme is applied.
If you specify to apply the local
AAA scheme, you need to
perform the configuration
concerning local user as well.
If you specify to apply an
existing scheme by providing
the radius-scheme-name
argument, you need to perform
the following configuration as
well:
z Perform AAA&RADIUS
configuration on the switch.
(Refer to the
AAA&RADIUS&HWTACAC
S&EAD module for more.)
z Configure the user name
and password accordingly
on the AAA server. (Refer to
the user manual of AAA
server.)
Create a local user
(Enter local user view.)
local-user
user-name
Required
No local user exists by default.
Set the authentication
password for the local
user
password { simple |
cipher } password
Required
Specify the service type
for AUX users
service-type
terminal [ level
level ]
Required
Quit to system view
quit
Enter AUX user interface
view
user-interface aux 0
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-14
Operation Command Description
Configure to authenticate
users locally or remotely
authentication-mod
e scheme
[ command-
authorization ]
Required
The specified AAA scheme
determines whether to
authenticate users locally or
remotely.
Users are authenticated locally
by default.
Set the
baud rate
speed speed-value
Optional
The default baud rate of the
AUX port (also the Console
port) is 9,600 bps.
Set the
check mode
parity { even | none |
odd }
Optional
By default, the check mode of a
Console port is set to none,
that is, no check bit.
Set the stop
bits
stopbits { 1 | 1.5 | 2 }
Optional
The default stop bits of a
Console port is 1.
Configure
the
Console
port
Set the data
bits
databits { 7 | 8 }
Optional
The default data bits of a
Console port is 8.
Configure the command
level available to users
logging into the user
interface
user privilege level
level
Optional
By default, commands of level
3 are available to users logging
into the AUX user interface.
Make terminal services
available to the user
interface
shell
Optional
By default, terminal services
are available in all user
interfaces.
Set the maximum
number of lines the
screen can contain
screen-length
screen-length
Optional
By default, the screen can
contain up to 24 lines.
You can use the screen-length
0 command to disable the
function to display information
in pages.
Set history command
buffer size
history-command
max-size value
Optional
The default history command
buffer size is 10. That is, a
history command buffer can
store up to 10 commands by
default.
Operation Manual – Login
H3C S3100-52P Ethernet Switch Chapter 2
Logging in through the Console Port
2-15
Operation Command Description
Set the timeout time for
the user interface
idle-timeout minutes
[ seconds ]
Optional
The default timeout time of a
user interface is 10 minutes.
With the timeout time being 10
minutes, the connection to a
user interface is terminated if
no operation is performed in
the user interface within 10
minutes.
You can use the idle-timeout 0
command to disable the
timeout function.
Note that the command level available to users logging into a switch depends on both
the authentication-mode scheme [ command-authorization ] command and the
service-type terminal [ level level ] command, as listed in
Table 2-9.
Table 2-9 Determine the command level
Scenario
Authentication
mode
User type Command
Command level
The service-type
terminal command does
not specify the available
mand level.
com
Level 0
The default
command level of
local users is level 0.
authentication
-mode scheme
[ command-au
thorization ]
Users
logging into
the Console
port and
passing
AAA&RADI
US or local
authenticati
on
The service-type
terminal command
specifies the available
command level.
Determined by the
command level
specified by the
service-type
terminal command
2.6.2 Configuration Example
I. Network requirements
Assume that you are a level 3 VTY user and want to perform the following configuration
for users logging in through the Console port:
z Configure the name of the local user to be “guest”.
z Set the authentication password of the local user to 123456 (in plain text).
z Set the service type of the local user to Terminal.
z Configure to authenticate users logging in through the Console port in the scheme
mode.
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14
  • Page 15 15
  • Page 16 16
  • Page 17 17
  • Page 18 18
  • Page 19 19
  • Page 20 20
  • Page 21 21
  • Page 22 22
  • Page 23 23
  • Page 24 24
  • Page 25 25
  • Page 26 26
  • Page 27 27
  • Page 28 28
  • Page 29 29
  • Page 30 30
  • Page 31 31
  • Page 32 32
  • Page 33 33
  • Page 34 34
  • Page 35 35
  • Page 36 36
  • Page 37 37
  • Page 38 38
  • Page 39 39
  • Page 40 40
  • Page 41 41
  • Page 42 42
  • Page 43 43
  • Page 44 44
  • Page 45 45
  • Page 46 46
  • Page 47 47
  • Page 48 48
  • Page 49 49
  • Page 50 50
  • Page 51 51
  • Page 52 52
  • Page 53 53
  • Page 54 54
  • Page 55 55
  • Page 56 56
  • Page 57 57
  • Page 58 58
  • Page 59 59
  • Page 60 60
  • Page 61 61

H3C S3100-52P Operating instructions

Category
Network switches
Type
Operating instructions

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI