No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CX11x, CX31x, CX710 (Earlier Than V6.03), and CX91x Series Switch Modules V100R001C10 Configuration Guide 13

The documents describe the configuration of various services supported by the CX11x&CX31x&CX91x series switch modules The description covers configuration examples and function configurations.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Examples

Configuration Examples

This section describes configuration examples for the console and VTY user interfaces, including networking requirements, configuration notes, and configuration roadmap.

Example of Configuring the Console User Interface

Networking Requirements

Before logging in to the device using the console user interface to maintain the device locally, a user can configure the attributes of the console user interface to ensure device security.

In this example, the level of console users is 15. The password authentication mode and authentication password Helloworld@6789 are configured for console users to log in to the device.

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure the user level on the console user interface.

  2. Configure the authentication mode and password on the console user interface.

Procedure

  1. Configure the user level on the console user interface.

    <HUAWEI> system-view
    [~HUAWEI] user-interface console 0
    [~HUAWEI-ui-console0] user privilege level 15

  2. Configure the authentication mode and password on the console user interface.

    [*HUAWEI-ui-console0] authentication-mode password
    [*HUAWEI-ui-console0] set authentication password
    Please configure the login password (8-16)                                                                                          
    Enter Password:                                                                                                                     
    Confirm Password:
    [*HUAWEI-ui-console0] commit
    [~HUAWEI-ui-console0] quit

    After the console user interface is configured, users can use the console interface to log in to the device in the password authentication mode to maintain the device locally. For details on how to log in to the device see Logging In to the Device Through a Console Port.

  3. Verify the configuration.

    # Run the quit command to disconnect the terminal from the device, connect the terminal to the device using a console cable, and verify that the new password is valid.

    # Run the user-interface console 0 command to enter the console interface view, and run the display this command to check the configurations on the console interface.

    [~HUAWEI] user-interface console 0
    [~HUAWEI-ui-console0] display this
    #
    user-interface con 0
     authentication-mode password
     set authentication password cipher R${$!_9Ba#6w(/W7c>L([CE06U.NA.thxD3llM^J;w5DYBN0:J8O%aGxD9gLVi6a'
    #
    return

Configuration File

#
user-interface con 0
 authentication-mode password
 set authentication password cipher R${$!_9Ba#6w(/W7c>L([CE06U.NA.thxD3llM^J;w5DYBN0:J8O%aGxD9gLVi6a'
#
return

Example of Configuring a VTY User Interface

Networking Requirements

A user can use the VTY interface to log in to a remote device using Telnet. The device administrator can configure the attributes of the VTY user interface to ensure device security.

In this example, the level of VTY users is 2. The password authentication mode and authentication password Helloworld@6789 are configured for VTY users to log in to the device. Only the user whose IP address is 10.1.1.1 can log in to the device.

If a user logs in to the device and does not perform an operation within 30 minutes, the user's terminal disconnects from the device.

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure the maximum number of concurrent VTY user interfaces to 8.

  2. Configure restrictions on call-in and call-out permissions on the VTY user interface to allow users at a specified address or address segment to log in to the device.

  3. Configure terminal attributes on the VTY user interface.

  4. Configure the user level on the VTY user interface.

  5. Configure the authentication mode and password of the VTY user interface.

Procedure

  1. Configure the maximum number of concurrent VTY user interfaces.

    <HUAWEI> system-view
    [~HUAWEI] user-interface maximum-vty 8

  2. Configure restrictions on call-in and call-out permissions on the VTY user interface.

    [*HUAWEI] acl 2000
    [*HUAWEI-acl4-basic-2000] rule deny source 10.1.1.1 0
    [*HUAWEI-acl4-basic-2000] rule permit source any
    [*HUAWEI-acl4-basic-2000] quit
    [*HUAWEI] user-interface vty 0 7
    [*HUAWEI-ui-vty0-7] acl 2000 inbound

  3. Configure terminal attributes on the VTY user interface.

    [*HUAWEI-ui-vty0-7] shell
    [*HUAWEI-ui-vty0-7] idle-timeout 30
    [*HUAWEI-ui-vty0-7] screen-length 30
    [*HUAWEI-ui-vty0-7] history-command max-size 20

  4. Configure the user level on the VTY user interface.

    [*HUAWEI-ui-vty0-7] user privilege level 2
    [*HUAWEI-ui-vty0-7] commit

  5. Configure the authentication mode and password of the VTY user interface.

    [*HUAWEI-ui-vty0-7] authentication-mode password
    [*HUAWEI-ui-vty0-7] set authentication password
    Please configure the login password (8-16)                                      
    Enter Password:                                                                 
    Confirm Password:
    [*HUAWEI-ui-vty0-7] commit
    [~HUAWEI-ui-vty0-7] quit

    After the VTY user interface is configured, users can log in to the device in the password authentication mode using Telnet to maintain the device locally or remotely. For details on how to log in to the device see Logging In to the Device Through Telnet.

  6. Verify the configuration.

    # Connect the terminal to the device using Telnet, and verify that the new password is valid.

    # Use 10.1.1.1 to log in to the device using Telnet. The login fails.

    # Run the user-interface vty 0 7 command to enter the VTY interface view, and run the display this command to check the configurations on the VTY interface.

    [~HUAWEI] user-interface vty 0 7
    [~HUAWEI-ui-vty0-7] display this
    #
    user-interface vty 0 7
     acl 2000 inbound
     authentication-mode password
     user privilege level 2
     set authentication password cipher %%$%$RdF~Z+6N|0d^a3%v5`W~3.%ymjpAD#$u[T'e#e32hd8G~4+&%$%$
     history-command max-size 20
     idle-timeout 30 0
     screen-length 30 
    #
    return

Configuration File

#
acl number 2000
 rule 5 deny source 10.1.1.1 0
 rule 10 permit
#
user-interface maximum-vty 8
#
user-interface vty 0 7
 acl 2000 inbound
 authentication-mode password
 user privilege level 2
 set authentication password cipher %%$%$RdF~Z+6N|0d^a3%v5`W~3.%ymjpAD#$u[T'e#e32hd8G~4+&%$%$
 history-command max-size 20
 idle-timeout 30 0
 screen-length 30
#
return
Translation
Download
Updated: 2019-12-13

Document ID: EDOC1000041694

Views: 60284

Downloads: 3623

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next