No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - Basic Configuration

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document provides the basic concepts, configuration procedures, and configuration examples in different application scenarios of the Basic configuration supported by the device.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Basic Configuration on a Device at the First Login (Console Port or Mini USB Port)

Basic Configuration on a Device at the First Login (Console Port or Mini USB Port)

Context

This section describes how to configure the time and date, character set in the system, device name, management IP address, and the user level and authentication mode for Telnet users at first login through the console port or mini USB port.

Procedure

  1. Set the time and date on the device.
    1. Run clock timezone time-zone-name { add | minus } offset

      The time zone is set.

      If you do not specify the time zone name, the system uses Default Zone Name.

      • add: adds the specified time zone offset to the Coordinated Universal Time (UTC). That is, the sum of the default UTC time zone and offset equals the time zone specified by time-zone-name.

      • minus: subtracts the specified time zone offset from the UTC. That is, the remainder obtained by subtracting offset from the default UTC time zone equals the time zone specified by time-zone-name.

    2. Run clock datetime HH:MM:SS YYYY-MM-DD

      The current time and date are set.

      If the time zone is not set, the time set using this command is considered as the UTC time. Before setting the current time, you are advised to confirm the current zone and set the correct time zone offset.

    3. (Optional) Run clock daylight-saving-time time-zone-name one-year start-time start-date end-time end-date offsetclock daylight-saving-time time-zone-name repeating start-time { { first | second | third | fourth | last } weekday month | start-date1 } end-time { { first | second | third | fourth | last } weekday month | end-date1 } offset [ start-year [ end-year ] ]

      Or

      Daylight saving time (DST) is set.

      By default, DST is not configured.

      If you configure periodic DST, the combination of the DST start time and end time can be any of the following: date+date, day of the week+day of the week, date+day of the week, and day of the week+date. For the configuration method, see clock daylight-saving-time.

      When DST is used, you can run the clock timezone time-zone-name { add | minus } offset command to set the time zone. The time zone in the output of the display clock command is, however, the name of the DST time zone. When DST ends, the system displays the original time zone.

  2. (Optional) Configure the character set in the system.

    You can configure the character set so that the system supports only English input or both Chinese and English inputs.

    1. Run system-view

      The system view is displayed.

    2. Run language character-set character

      The character set in the system is configured.

      The default character set in the system is ISO8859-1, that is, the system supports only English input.

    3. Run quit

      Exit from the system view.

  3. (Optional) Enables the password authentication function for users who enter the diagnostic view.
    1. Run system-view

      The system view is displayed.

    2. Run diagnose verify enable

      Enables the password authentication function for users who enter the diagnostic view.

      By default, password authentication is not required for users who enter the diagnostic view.

    3. Run quit

      Exit from the system view.

  4. (Optional) Enables the query response processing function for the NETBIOS name service and specifies the type and number of the response interface.
    1. Run system-view

      The system view is displayed.

    2. Run interface interface-type interface-number

      The interface view is displayed.

    3. Run ip address ip-address { mask | mask-length }

      The management IP address is assigned.

    4. Run dhcp select interface

      Enables an interface to use the interface address pool.

    5. Run quit

      Return to the interface view.

    6. Run ip address ip-address { mask | mask-length }

      Configure the IP under the query response interface.

    7. Run quit

      Return to the system view.

    8. Run ip netbios-reply interface

      Enables the query response processing function for the NETBIOS name service and specifies the type and number of the response interface.

  5. Set the device name and management IP address.
    1. Run system-view

      The system view is displayed.

      By default, the query response processing function for the NETBIOS name service is disabled.

    2. Run sysname host-name

      The device name is set.

      By default, the device name is Huawei.

    3. Run interface interface-type interface-number

      The interface view is displayed.

      In addition to the management interface on the device, you can also assign the management IP address to Layer 3 interfaces such as VLANIF interfaces on the device.

    4. Run ip address ip-address { mask | mask-length }

      The management IP address is assigned.

      The management IP address is used to maintain and manage the device. Configure the IP address and routes based on the network plan to ensure that the routes between the terminal and device are reachable.

    5. Run quit

      Return to the system view.

  6. Set the user level and authentication mode for Telnet users.
    1. Run telnet [ ipv6 ] server enable

      The Telnet server is enabled.

      By default, the Telnet server is disabled.

    2. Run user-interface vty first-ui-number [ last-ui-number ]

      The VTY user interface view is displayed.

    3. Run protocol inbound { all | telnet }

      The VTY user interface is configured to support the Telnet protocol.

      By default, a VTY user interface supports the SSH and Telnet protocol.

    4. Run user privilege level level

      The Telnet user level is set.

      By default, users who log in through the VTY user interface can access commands at level 0.

    5. Run authentication-mode aaa

      The authentication mode for Telnet users is set to AAA authentication.

      By default, no authentication mode is configured for the VTY user interface. For the users logging in to the VTY interface, an authentication method must be configured; otherwise, users cannot log in.

      The system provides two authentication modes: AAA authentication and password authentication. AAA authentication requires both the user name and password, which is more secure than password authentication. This section describes how to configure AAA authentication. For the configuration method of other authentication modes, see Configuring an Authentication Mode for a VTY User Interface.

    6. Run aaa

      The AAA view is displayed.

    7. Run local-user user-name password irreversible-cipher password

      The user name and password for login through Telnet are configured.

      The value of password can be a plain-text string of 8 to 128 characters or a cipher-text string of 68 characters.

      A too simple password may cause a potential security risk. To enhance the security strength, the password entered in plain text must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters, and special characters except the question mark (?). In addition, the password cannot be the same as the user name or the mirror user name.

    8. Run local-user user-name service-type telnet

      The login mode is set to Telnet.

  7. Save the configuration.

    After basic configuration is complete, you are advised to save the configuration. If the configuration is lost, the connection and configuration for the first login must be performed again.

    1. Run return

      Return to the user view.

    2. Run save

      The configuration is saved.

      The current configuration has been saved in the configuration file. For details, see Saving the Configuration File.

Verifying the Configuration

  • Run the display clock command to check the current date and clock setting.
  • Run the display ip interface brief [ interface-type [ interface-number ] ] command to check brief information about the IP address on the interface.
  • Run the display user-interface [ ui-type ui-number1 | ui-number ] [ summary ] command to check the physical attributes and configuration of the user interface.
  • Run the display local-user command to check the local user list.
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100034066

Views: 89002

Downloads: 486

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next