H3C S3100-52P Operating instructions

Operation Manual – Login

H3C S3100-52P Ethernet Switch Table of Contents

i

Table of Contents

Chapter 1 Logging into an Ethernet Switch ...............................................................................1-1

1.1 Logging into an Ethernet Switch........................................................................................1-1

1.2 Introduction to the User Interface ...................................................................................... 1-1

1.2.1 Supported User Interfaces......................................................................................1-1

1.2.2 User Interface Number............................................................................................1-1

1.2.3 Common User Interface Configuration ...................................................................1-2

Chapter 2 Logging in through the Console Port........................................................................2-1

2.1 Introduction........................................................................................................................2-1

2.2 Logging in through the Console Port.................................................................................2-1

2.3 Console Port Login Configuration......................................................................................2-3

2.3.1 Common Configuration........................................................................................... 2-3

2.3.2 Console Port Login Configurations for Different Authentication Modes..................2-4

2.4 Console Port Login Configuration with Authentication Mode Being None........................ 2-6

2.4.1 Configuration Procedure.........................................................................................2-6

2.4.2 Configuration Example............................................................................................2-8

2.5 Console Port Login Configuration with Authentication Mode Being Password.................2-9

2.5.1 Configuration Procedure.........................................................................................2-9

2.5.2 Configuration Example..........................................................................................2-11

2.6 Console Port Login Configuration with Authentication Mode Being Scheme..................2-13

2.6.1 Configuration Procedure.......................................................................................2-13

2.6.2 Configuration Example..........................................................................................2-15

Chapter 3 Logging in through Telnet.......................................................................................... 3-1

3.1 Introduction........................................................................................................................3-1

3.1.1 Common Configuration........................................................................................... 3-1

3.1.2 Telnet Configurations for Different Authentication Modes ...................................... 3-2

3.2 Telnet Configuration with Authentication Mode Being None.............................................3-4

3.2.1 Configuration Procedure.........................................................................................3-4

3.2.2 Configuration Example............................................................................................3-5

3.3 Telnet Configuration with Authentication Mode Being Password......................................3-7

3.3.1 Configuration Procedure.........................................................................................3-7

3.3.2 Configuration Example............................................................................................3-8

3.4 Telnet Configuration with Authentication Mode Being Scheme ......................................3-10

3.4.1 Configuration Procedure.......................................................................................3-10

3.4.2 Configuration Example.......................................................................................... 3-14

3.5 Telneting to a Switch .......................................................................................................3-15

3.5.1 Telneting to a Switch from a Terminal...................................................................3-15

3.5.2 Telneting to another Switch from the Current Switch............................................3-18

Operation Manual – Login

H3C S3100-52P Ethernet Switch Table of Contents

ii

Chapter 4 Logging in Using Modem............................................................................................ 4-1

4.1 Introduction........................................................................................................................4-1

4.2 Configuration on the Administrator Side............................................................................4-1

4.3 Configuration on the Switch Side.......................................................................................4-1

4.3.1 Modem Configuration.............................................................................................. 4-1

4.3.2 Switch Configuration............................................................................................... 4-2

4.4 Modem Connection Establishment....................................................................................4-3

Chapter 5 Logging in through Web-based Network Management System............................. 5-1

5.1 Introduction........................................................................................................................5-1

5.2 HTTP Connection Establishment.......................................................................................5-1

5.3 Web Server Shutdown/Startup.......................................................................................... 5-2

Chapter 6 Logging in through NMS............................................................................................. 6-1

6.1 Introduction........................................................................................................................6-1

6.2 Connection Establishment Using NMS..............................................................................6-1

Chapter 7 Configuring Source IP Address for Telnet Service Packets................................... 7-1

7.1 Configuring Source IP Address for Telnet Service Packets..............................................7-1

7.2 Displaying Source IP Address Configuration.....................................................................7-2

Chapter 8 User Control.................................................................................................................8-1

8.1 Introduction........................................................................................................................8-1

8.2 Controlling Telnet Users.................................................................................................... 8-1

8.2.1 Prerequisites ........................................................................................................... 8-1

8.2.2 Controlling Telnet Users by Source IP Addresses.................................................. 8-1

8.2.3 Controlling Telnet Users by Source and Destination IP Addresses........................ 8-2

8.2.4 Controlling Telnet Users by Source MAC Addresses.............................................8-3

8.2.5 Configuration Example............................................................................................8-4

8.3 Controlling Network Management Users by Source IP Addresses...................................8-5

8.3.1 Prerequisites ........................................................................................................... 8-5

8.3.2 Controlling Network Management Users by Source IP Addresses ........................8-5

8.3.3 Configuration Example............................................................................................8-7

8.4 Controlling Web Users by Source IP Address...................................................................8-7

8.4.1 Prerequisites ........................................................................................................... 8-8

8.4.2 Controlling Web Users by Source IP Addresses ....................................................8-8

8.4.3 Disconnecting a Web User by Force ......................................................................8-8

8.4.4 Configuration Example............................................................................................8-9

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 1

Logging into an Ethernet Switch

1-1

Chapter 1 Logging into an Ethernet Switch

1.1 Logging into an Ethernet Switch

You can log into an S3100-52P Ethernet switch in one of the following ways:

z Logging in locally through the Console port

z Telneting locally or remotely to an Ethernet port

z Telneting to the Console port using a modem

z Logging into the Web-based network management system

z Logging in through NMS (network management station)

1.2 Introduction to the User Interface

1.2.1 Supported User Interfaces

S3100-52P Ethernet switch support two types of user interfaces: AUX and VTY.

Table 1-1 Description on user interface

User interface Applicable user Port used Description

AUX

Users logging in

through the Console

port

Console port

Each switch can

accommodate one AUX

user.

VTY

Telnet users and

SSH users

Ethernet port

Each switch can

accommodate up to five

VTY users.

 Note:

The AUX port and the Console port of a H3C series Ethernet switch are the same port.

You will be in the AUX user interface if you log in through this port.

1.2.2 User Interface Number

Two kinds of user interface index exist: absolute user interface index and relative user

interface index.

1) The absolute user interface indexes are as follows:

z AUX user interface: 0

z VTY user interfaces: Numbered after AUX user interfaces and increases in the

step of 1

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 1

Logging into an Ethernet Switch

1-2

2) A relative user interface index can be obtained by appending a number to the

identifier of a user interface type. It is generated by user interface type. The

relative user interface indexes are as follows:

z AUX user interface: AUX 0

z VTY user interfaces: VTY 0, VTY 1, VTY 2, and so on.

1.2.3 Common User Interface Configuration

Table 1-2 Common user interface configuration

Operation Command Description

Lock the current user

interface

lock

Optional

Execute this command in

user view.

A user interface is not locked

by default.

Specify to send

messages to all user

interfaces/a specified

user interface

send { all | number |

type number }

Optional

Execute this command in

user view.

Disconnect a specified

user interface

free user-interface

[ type ] number

Optional

Execute this command in

user view.

Enter system view

system-view

—

Enter user interface

view

user-interface [ type ]

first-number

[ last-number ]

—

Set the command that is

automatically executed

when a user logs into

the user interface

auto-execute

command text

Optional

By default, no command is

automatically executed when

a user logs into a user

interface.

Display the information

about the current user

interface/all user

interfaces

display users [ all ]

Display the physical

attributes and

configuration of the

current/a specified user

interface

display user-interface

[ type number | number ]

Display the information

about the current web

users

display web users

Optional

You can execute the display

command in any view.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 1

Logging into an Ethernet Switch

1-3

Caution:

z The auto-execute command command may cause you unable to perform common

configuration in the user interface, so use it with caution.

z Before executing the auto-execute command command and save your

configuration, make sure you can log into the switch in other modes and cancel the

configuration.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-1

Chapter 2 Logging in through the Console Port

2.1 Introduction

To log in through the Console port is the most common way to log into a switch. It is also

the prerequisite to configure other login methods. Normally, you can log into an

S3100-52P Ethernet switch through its Console port.

To log into an Ethernet switch through its Console port, the communication

configuration of the user terminal must be in accordance with that of the Console port.

Table 2-1 lists the default settings of a Console port.

Table 2-1 The default settings of a Console port

Setting Default

Baud rate 9,600 bps

Flow control None

Check mode (Parity) None

Stop bits 1

Data bits 8

After logging into a switch, you can perform configuration for AUX users. Refer to

section

2.3 “Console Port Login Configuration” for more.

2.2 Logging in through the Console Port

Following are the procedures to connect to a switch through the Console port.

1) Connect the serial port of your PC/terminal to the Console port of the switch, as

shown in

Figure 2-1.

Console port

RS-232 port

Configuration cable

Console port

RS-232 port

Configuration cable

Figure 2-1 Diagram for setting the connection to the Console port

2) If you use a PC to connect to the Console port, launch a terminal emulation utility

(such as Terminal in Windows 3.X or HyperTerminal in Windows 9X) and perform

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-2

the configuration shown in Figure 2-2 through Figure 2-4 for the connection to be

created. Normally, the parameters of a terminal are configured as those listed in

Table 2-1. And the type of the terminal is set to VT100.

Figure 2-2 Create a connection

Figure 2-3 Specify the port used to establish the connection

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-3

Figure 2-4 Set port parameters

3) Turn on the switch. You will be prompted to press the Enter key if the switch

successfully completes POST (power-on self test). The prompt (such as <H3C>)

appears after you press the Enter key.

4) You can then configure the switch or check the information about the switch by

executing the corresponding commands. You can also acquire help by typing the ?

character. The commands available on a switch are described in the command

manuals.

2.3 Console Port Login Configuration

2.3.1 Common Configuration

Table 2-2 lists the common configuration of Console port login.

Table 2-2 Common configuration of Console port login

Configuration Remarks

Baud rate

Optional

The default baud rate is 9,600 bps.

Check mode

Optional

By default, the check mode of the Console

port is set to “none”, which means no check

bit.

Stop bits

Optional

The default stop bits of a Console port is 1.

Console port

configuration

Data bits

Optional

The default data bits of a Console port is 8.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-4

Configuration Remarks

AUX user

interface

configuration

Configure the

command level

available to the users

logging into the AUX

user interface

Optional

By default, commands of level 3 are

available to the users logging into the AUX

user interface.

Make terminal

services available

Optional

By default, terminal services are available in

all user interfaces

Set the maximum

number of lines the

screen can contain

Optional

By default, the screen can contain up to 24

lines.

Set history command

buffer size

Optional

By default, the history command buffer can

contain up to 10 commands.

Terminal

configuration

Set the timeout time

of a user interface

Optional

The default timeout time is 10 minutes.

Caution:

Changing of Console port configuration terminates the connection to the Console port.

To establish the connection again, you need to modify the configuration of the

termination emulation utility running on your PC accordingly. Refer to section

2.2

“Logging in through the Console Port” for more.

2.3.2 Console Port Login Configurations for Different Authentication Modes

Table 2-3 lists Console port login configurations for different authentication modes.

Table 2-3 Console port login configurations for different authentication modes

Authentication

mode

Console port login

configuration

Remarks

None

Perform

common

configuration

Perform common

configuration for

Console port

login

Optional

Refer to section

2.3.1

“Common Configuration” for

more.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-5

Authentication

mode

Console port login

configuration

Remarks

Configure the

password

Configure the

password for

local

authentication

Required

Password

Perform

common

configuration

Perform common

configuration for

Console port

login

Optional

Refer to section

2.3.1

“Common Configuration” for

more.

Specify to

perform local

authenticatio

n or RADIUS

authenticatio

n

AAA

configuration

specifies whether

to perform local

authentication or

RADIUS

authentication

Optional

Local authentication is

performed by default.

Refer to the

AAA&RADIUS&HWTACAC

S&EAD module for more.

Configure

user name

and

password

Configure user

names and

passwords for

local/RADIUS

users

Required

z The user name and

password of a local user

are configured on the

switch.

z The user name and

password of a RADIUS

user are configured on

the RADIUS server.

Refer to user manual of

RADIUS server for

more.

Manage AUX

users

Set service type

for AUX users

Required

Scheme

Perform

common

configuration

Perform common

configuration for

Console port

login

Optional

Refer to section

2.3.1

“Common Configuration” for

more.

 Note:

Changes of the authentication mode of Console port login will not take effect unless

you quit the command-line interface and then enter it again.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-6

2.4 Console Port Login Configuration with Authentication

Mode Being None

2.4.1 Configuration Procedure

Table 2-4 Console port login configuration with the authentication mode being none

Operation Command Description

Enter system view

system-view

—

Enter AUX user interface view user-interface aux 0 —

Configure not to authenticate

users

authentication-mode

none

Required

By default, users

logging in through

the Console port are

not authenticated.

Set the baud

rate

speed speed-value

Optional

The default baud

rate of an AUX port

(also the Console

port) is 9,600 bps.

Set the check

mode

parity { even | none |

odd }

Optional

By default, the check

mode of a Console

port is set to none,

that is, no check bit.

Set the stop

bits

stopbits { 1 | 1.5 | 2 }

Optional

The stop bits of a

Console port is 1.

Configure the

Console port

Set the data

bits

databits { 7 | 8 }

Optional

The default data bits

of a Console port is

8.

Configure the command level

available to users logging into

the user interface

user privilege level level

Optional

By default,

commands of level 3

are available to

users logging into

the AUX user

interface.

Make terminal services

available

shell

Optional

By default, terminal

services are

available in all user

interfaces.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-7

Operation Command Description

Set the maximum number of

lines the screen can contain

screen-length

Optional

By default, the

screen can contain

up to 24 lines.

You can use the

screen-length 0

command to disable

the function to

display information

in pages.

Set the history command buffer

size

history-command

max-size value

Optional

The default history

command buffer size

is 10. That is, a

history command

buffer can store up

to 10 commands by

default.

Set the timeout time for the

user interface

idle-timeout minutes

[ seconds ]

Optional

The default timeout

time of a user

interface is 10

minutes.

With the timeout

time being 10

minutes, the

connection to a user

interface is

terminated if no

operation is

performed in the

user interface within

10 minutes.

You can use the

idle-timeout 0

command to disable

the timeout function.

Note that the command level available to users logging into a switch depends on both

the authentication-mode none command and the user privilege level level

command, as listed in the following table.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-8

Table 2-5 Determine the command level (A)

Scenario

Authentication

mode

User type Command

Command

level

The user privilege level

level command not executed

Level 3

None

(authentication-

mode none)

Users

logging in

through

Console port

The user privilege level

level command already

executed

Determined

by the level

argument

2.4.2 Configuration Example

I. Network requirements

Assume that you are a level 3 VTY user and want to perform the following configuration

for users logging in through the Console port:

z Do not authenticate users logging in through the Console port.

z Commands of level 2 are available to users logging into the AUX user interface.

z The baud rate of the Console port is 19,200 bps.

z The screen can contain up to 30 lines.

z The history command buffer can contain up to 20 commands.

z The timeout time of the AUX user interface is 6 minutes.

II. Network diagram

User PC running Telnet

Ethernet1/0/1

Eth er net

User PC running Telnet

Ethernet1/0/1

Eth er net

Figure 2-5 Network diagram for AUX user interface configuration (with th

authentication mode being none)

e

III. Configuration procedure

# Enter system view.

<H3C> system-view

# Enter AUX user interface view.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-9

[H3C] user-interface aux 0

# Specify not to authenticate users logging in through the Console port.

[H3C-ui-aux0] authentication-mode none

# Specify commands of level 2 are available to users logging into the AUX user

interface.

[H3C-ui-aux0] user privilege level 2

# Set the baud rate of the Console port to 19,200 bps.

[H3C-ui-aux0] speed 19200

# Set the maximum number of lines the screen can contain to 30.

[H3C-ui-aux0] screen-length 30

# Set the maximum number of commands the history command buffer can store to 20.

[H3C-ui-aux0] history-command max-size 20

# Set the timeout time of the AUX user interface to 6 minutes.

[H3C-ui-aux0] idle-timeout 6

2.5 Console Port Login Configuration with Authentication

Mode Being Password

2.5.1 Configuration Procedure

Table 2-6 Console port login configuration with the authentication mode being

password

Operation Command Description

Enter system view

system-view

—

Enter AUX user

interface view

user-interface aux

0

—

Configure to

authenticate users

using the local

password

authentication-mo

de password

Required

By default, users logging into a

switch through the Console port

are not authenticated; while those

logging in through Modems or

Telnet are authenticated.

Set the local password

set authentication

password { cipher |

simple } password

Required

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-10

Operation Command Description

Set the

baud rate

speed speed-value

Optional

The default baud rate of an AUX

port (also the Console port) is

9,600 bps.

Set the

check

mode

parity { even | none

| odd }

Optional

By default, the check mode of a

Console port is set to none, that

is, no check bit.

Set the

stop bits

stopbits { 1 | 1.5 |

2 }

Optional

The default stop bits of a Console

port is 1.

Configure

the

Console

port

Set the

data bits

databits { 7 | 8 }

Optional

The default data bits of a Console

port is 8.

Configure the command

level available to users

logging into the user

interface

user privilege level

level

Optional

By default, commands of level 3

are available to users logging into

the AUX user interface.

Make terminal services

available to the user

interface

shell

Optional

By default, terminal services are

available in all user interfaces.

Set the maximum

number of lines the

screen can contain

screen-length

Optional

By default, the screen can contain

up to 24 lines.

You can use the screen-length 0

command to disable the function

to display information in pages.

Set history command

buffer size

history-command

max-size value

Optional

The default history command

buffer size is 10. That is, a history

command buffer can store up to

10 commands by default.

Set the timeout time for

the user interface

idle-timeout

minutes [ seconds ]

Optional

The default timeout time of a user

interface is 10 minutes.

With the timeout time being 10

minutes, the connection to a user

interface is terminated if no

operation is performed in the user

interface within 10 minutes.

You can use the idle-timeout 0

command to disable the timeout

function.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-11

Note that the level the commands of which are available to users logging into a switch

depends on both the authentication-mode password and the user privilege level

level command, as listed in the following table.

Table 2-7 Determine the command level (B)

Scenario

Authentication

mode

User type Command

Command

level

The user privilege level

level command is not

executed

Level 3

Local authentication

(authentication-m

ode password)

Users logging in

through

Console port

The user privilege level

level command is

already executed

Determined

by the level

argument

2.5.2 Configuration Example

I. Network requirements

Assume that you are a level 3 VTY user and want to perform the following configuration

for users logging in through the Console port:

z Authenticate users logging in through the Console port using the local password.

z Set the local password to 123456 (in plain text).

z The commands of level 2 are available to users logging into the AUX user

interface.

z The baud rate of the Console port is 19,200 bps.

z The screen can contain up to 30 lines.

z The history command buffer can store up to 20 commands.

z The timeout time of the AUX user interface is 6 minutes.

II. Network diagram

User PC running Telnet

Ethernet1/0/1

Ethernet

User PC running Telnet

Ethernet1/0/1

Ethernet

Figure 2-6 Network diagram for AUX user interface configuration (with the

authentication mode being

password)

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-12

III. Configuration procedure

# Enter system view.

<H3C> system-view

# Enter AUX user interface view.

[H3C] user-interface aux 0

# Specify to authenticate users logging in through the Console port using the local

password.

[H3C-ui-aux0] authentication-mode password

# Set the local password to 123456 (in plain text).

[H3C-ui-aux0] set authentication password simple 123456

# Specify commands of level 2 are available to users logging into the AUX user

interface.

[H3C-ui-aux0] user privilege level 2

# Set the baud rate of the Console port to 19,200 bps.

[H3C-ui-aux0] speed 19200

# Set the maximum number of lines the screen can contain to 30.

[H3C-ui-aux0] screen-length 30

# Set the maximum number of commands the history command buffer can store to 20.

[H3C-ui-aux0] history-command max-size 20

# Set the timeout time of the AUX user interface to 6 minutes.

[H3C-ui-aux0] idle-timeout 6

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-13

2.6 Console Port Login Configuration with Authentication

Mode Being Scheme

2.6.1 Configuration Procedure

Table 2-8 Console port login configuration with the authentication mode being scheme

Operation Command Description

Enter system view

system-view

—

Enter the

default ISP

domain view

domain

domain-name

Specify the

AAA scheme

to be applied

to the

domain

scheme { local |

none |

radius-scheme

radius-scheme-name

[ local ] |

hwtacacs-scheme

hwtacacs-scheme-n

ame [ local ] }

Configur

e the

authentic

ation

mode

Quit to

system view

quit

Optional

By default, the local AAA

scheme is applied.

If you specify to apply the local

AAA scheme, you need to

perform the configuration

concerning local user as well.

If you specify to apply an

existing scheme by providing

the radius-scheme-name

argument, you need to perform

the following configuration as

well:

z Perform AAA&RADIUS

configuration on the switch.

(Refer to the

AAA&RADIUS&HWTACAC

S&EAD module for more.)

z Configure the user name

and password accordingly

on the AAA server. (Refer to

the user manual of AAA

server.)

Create a local user

(Enter local user view.)

local-user

user-name

Required

No local user exists by default.

Set the authentication

password for the local

user

password { simple |

cipher } password

Required

Specify the service type

for AUX users

service-type

terminal [ level

level ]

Required

Quit to system view

quit

—

Enter AUX user interface

view

user-interface aux 0

—

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-14

Operation Command Description

Configure to authenticate

users locally or remotely

authentication-mod

e scheme

[ command-

authorization ]

Required

The specified AAA scheme

determines whether to

authenticate users locally or

remotely.

Users are authenticated locally

by default.

Set the

baud rate

speed speed-value

Optional

The default baud rate of the

AUX port (also the Console

port) is 9,600 bps.

Set the

check mode

parity { even | none |

odd }

Optional

By default, the check mode of a

Console port is set to none,

that is, no check bit.

Set the stop

bits

stopbits { 1 | 1.5 | 2 }

Optional

The default stop bits of a

Console port is 1.

Configure

the

Console

port

Set the data

bits

databits { 7 | 8 }

Optional

The default data bits of a

Console port is 8.

Configure the command

level available to users

logging into the user

interface

user privilege level

level

Optional

By default, commands of level

3 are available to users logging

into the AUX user interface.

Make terminal services

available to the user

interface

shell

Optional

By default, terminal services

are available in all user

interfaces.

Set the maximum

number of lines the

screen can contain

screen-length

Optional

By default, the screen can

contain up to 24 lines.

You can use the screen-length

0 command to disable the

function to display information

in pages.

Set history command

buffer size

history-command

max-size value

Optional

The default history command

buffer size is 10. That is, a

history command buffer can

store up to 10 commands by

default.

Operation Manual – Login

H3C S3100-52P Ethernet Switch Chapter 2

Logging in through the Console Port

2-15

Operation Command Description

Set the timeout time for

the user interface

idle-timeout minutes

[ seconds ]

Optional

The default timeout time of a

user interface is 10 minutes.

With the timeout time being 10

minutes, the connection to a

user interface is terminated if

no operation is performed in

the user interface within 10

minutes.

You can use the idle-timeout 0

command to disable the

timeout function.

Note that the command level available to users logging into a switch depends on both

the authentication-mode scheme [ command-authorization ] command and the

service-type terminal [ level level ] command, as listed in

Table 2-9.

Table 2-9 Determine the command level

Scenario

Authentication

mode

User type Command

Command level

The service-type

terminal command does

not specify the available

mand level.

com

Level 0

The default

command level of

local users is level 0.

authentication

-mode scheme

[ command-au

thorization ]

Users

logging into

the Console

port and

passing

AAA&RADI

US or local

authenticati

on

The service-type

terminal command

specifies the available

command level.

Determined by the

command level

specified by the

service-type

terminal command

2.6.2 Configuration Example

I. Network requirements

Assume that you are a level 3 VTY user and want to perform the following configuration

for users logging in through the Console port:

z Configure the name of the local user to be “guest”.

z Set the authentication password of the local user to 123456 (in plain text).

z Set the service type of the local user to Terminal.

z Configure to authenticate users logging in through the Console port in the scheme

mode.

Page is loading ...

H3C S3100-52P Operating instructions

H3C S3100-52P Operating instructions

Related papers

Other documents