No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

How to Log In to an AR Router Through the Web and CLI

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
How to Log In to the AR Router Through the Web and CLI

How to Log In to the AR Router Through the Web and CLI

Introduction

This document describes how to log in to an access router (AR), including login through the console port, mini USB port, and web UI. This document also describes the ports for logging in to the AR router, the default password for each login mode, and what to do if the login password is forgotten.

Ports for Logging In to the AR Router

You can log in to the AR router through the console port, mini USB port, Ethernet port, and management port.

After the AR router is powered on, you can connect to the console port or mini USB port and enter the default user name and password to log in to the device through the CLI. Alternatively, you can connect to the management port and enter the default user name and password to log in to the device through the web.

After logging in to the device for the first time, you can configure Telnet or STelnet to connect to the Ethernet port for subsequent login through the CLI.

You can connect a user terminal serial port to the console port of the device or connect the user terminal USB port to the mini USB port of the device.

Figure 1-1 Mini USB port

Generally, a console port is marked with the CONSOLE silkscreen, and a management port is marked with the MGMT or Management silkscreen.

Figure 1-2 Console port
Figure 1-3 Management port

The mini USB port and console port cannot be used together. By default, the console port works.

What Is the Default Password for Logging In to the AR Router?

You can use the Default Account/Password Query Tool to query the default password of the device.

  • Login through the console port, mini USB port, or Telnet

Default passwords for logging in to devices of different versions through the console port, mini USB port, or Telnet

Version

Model

Default User Name

Default Password

Default Level

V300R019 to latest version

All

admin

admin@huawei.com

15

V200R005C30 to V300R003C10

All

admin

Admin@huawei

15

V200R005C00 to V200R005C20

All

admin

Admin@huawei or admin

15

  • Web system-based login

Default passwords for logging in to devices of different versions through the web system

Version

Model

Default User Name

Default Password

Default Level

V300R019 to latest version

All

admin

admin@huawei

15

V200R005C30 to V300R003C10

All

admin

Admin@huawei

15

V200R005C00 to V200R005C20

All

admin

Admin@huawei or admin

15

  • BootROM login

Default passwords for logging in to devices of different versions through BootROM

Version

Model

Default User Name

Default Password

Default Level

V200R005C00 to latest version

All

No default user name is available.

Admin@huawei

No default level is available.

How to Log In to the AR Router Through the Console Port (CLI)

When an AR router is powered on for the first time, you can connect a PC to the console port of the device and enter the default user name and password to log in to and then configure and manage the device. The console port is provided on all device models.

Before performing the following operations, ensure that the device is powered on and is connected to a PC through the console cable.

Procedure

  1. Connect the DB9 female connector of the console cable to the COM port on the PC, and connect the RJ45 connector to the console port on the device, as shown in Figure 1-4. (No console cable is delivered with the AR100, AR120, AR150, AR160, AR200, AR100-S, AR110-S, AR120-S, AR150-S, AR160-S, AR200-S, AR500, and SRG500 series routers. You need to prepare console cables separately.)

    Figure 1-4 Connecting to a device through the console port

    Figure 1-5 Console port structure

  2. Start the terminal emulation software on the PC. Create a connection, select the connected port, and set communication parameters. (The following uses SecureCRT as an example.)

    1. Click to establish a connection, as shown in Figure 1-6.
      Figure 1-6 Establishing a connection
    2. Set the connected port and communication parameters, as shown in Figure 1-7.

      Select the connected port based on actual situations. For example, you can view port information and select the connected port in Device Manager on Windows.

      Communication parameters of the terminal emulation software must be consistent with those of the device. The default settings are as follows: 9600 bit/s baud rate, 8 data bits, 1 stop bit, no parity check, and no flow control.

    NOTE:

    By default, no flow control mode is configured on the device. Because RTS/CTS is selected in the software by default, you need to deselect RTS/CTS; otherwise, you cannot enter commands.

    If you modify the serial port communication parameters on the device, you must make the same modifications on the PC and then create a connection again.

    A PC may provide multiple serial ports with corresponding numbers. Ensure that the correct serial port is selected.

    For details about how to modify device communication parameters, see (Optional) Configuring Attributes for the Console User Interface under "First Login to a Device" in "Basic Configuration Guide" in the configuration guide.

    Figure 1-7 Setting the connected port and communication parameters

  3. Click Connect. The following information is displayed, prompting you to set a password. For details about the default password for logging in to the device, see What Is the Default Password for Logging In to the AR Router?.

    By default, a user only needs to pass password authentication to log in to the device from the console user interface. To prevent unauthorized users from accessing the device, change the authentication mode of the console user interface to AAA authentication.

    Login authentication    
                                                                                                                                               Username:admin                                                                  
    Password: 
    <Huawei> Info: The entered password is the same as the default. You are advised to change  it to ensure security. 

How to Log In to the Router Through the Management Port (Web)

In V200R006C10 and later versions, the management IP address is configured and the web system is enabled in factory default settings for all models. The default management IP address is 192.168.1.1/24.

After connecting a PC to the management port of the device, you can enter the default user name and password on the HTTPS page to log in to the device.

NOTE:

No default management IP address is configured for AR1200-S, AR2200-S, and AR3200-S series routers running versions earlier than V200R005C20. You need to specify the management IP address before logging in to the web system.

No default management IP address is configured for AR1200, AR2200, AR3200, AR120-S, SRG1300, SRG2300, and SRG3300 series routers running versions earlier than V200R006C10. You need to specify the management IP address before logging in to the web system.

  1. Open the web browser on the PC, enter https://192.168.1.1 in the address box, and press Enter. The web system login page is displayed.

    To enhance security, if you enter http://192.168.1.1, the system automatically jumps to https://192.168.1.1. If the EasyOperation edition is supported, the login page shown in Figure 1-8 is displayed. If the EasyOperation edition is not supported, the login page shown in Figure 1-9 is displayed.

    After the IP address of the management port is changed, enter the corresponding URL in the address box. By default, the HTTPS session timeout interval is 10 minutes.

    Figure 1-8 EasyOperation web system login page
    NOTE:

    The following AR routers support the EasyOperation web system:

    • AR100 series: AR109, AR109W, and AR109GW-L
    • AR120 series: AR121, AR129, AR121W, AR129CV, AR129CVW, AR121GW-L, AR129GW-L, and AR129CGVW-L
    • AR150 series: AR151, AR157, AR157G-HSPA+7, AR156, AR158E, AR158EVW, AR151W-P, AR151G-HSPA+7, AR157W, AR157VW, AR151G-C, and AR156W
    • AR160 series: AR161, AR161W, AR161EW, AR161EW-M1, AR161G-L, AR161G-Lc, AR161G-U, AR161F, AR161F-DGP, AR161FW, AR161FV-1P, AR161FG-L, AR161FG-Lc, AR161FGW-L, AR161FGW-La, AR161FGW-Lc, AR161FW-P-M5, AR162F, AR168F, AR168F-4P, AR169, AR169EW, AR169G-L, AR169G-Lc, AR169EGW-L, AR169-P-M9, AR169W-P-M9, AR169RW-P-M9, AR169F, AR169BF, AR169FGVW-L AR169FVW, AR169FVW-8S, AR169FGW-L, AR169CVW, AR169CVW-4B4S, and AR169JFVW-4B4S
    • AR200 series: AR201, AR206, AR207, AR207V, AR207V-P, AR208E, AR207G-HSPA+7, AR201VW-P, and AR207VW
    • AR550 series: AR550-8FE-D-H, AR550-24FE-D-H, AR550C-4GE, AR550C-2C6GE, and AR550C-2C6GE-2D
    • AREC series: AR111EC and AR161EC
    Figure 1-9 Classics web system login page
    NOTE:

    You can use the web mode to configure voice services only when the device works in PBX mode.

    If the device supports the voice self-service system, you can log in to the voice self-service system using either of the following methods:

    • On the web platform, click Enter voice self-service system.
    • Before logging in to the voice self-service system, run the self-service-http-server command in the voice view to access the self-service HTTP server configuration view, and then run the self-service http secure-server enable command to enable the self-service HTTPS server. You can enter https://ip address:1443/professional/user/login.html to access the voice self-service system. In the configuration view of the self-service HTTPS server, you can run the self-service http secure-server port command to change the port number of the self-service HTTPS server. The default port number is 1443.

    Enter the web user name and password, and click Login or press Enter. The web system homepage is displayed. If you log in to the device for the first time, enter the default user name and password. In other situations, enter the user-defined web user name and password.

  2. Change the initial login password after logging in to the web system for the first time.

    After changing the password, click OK. If the password is changed successfully, the system displays the message "Your password has been modified successfully". Click OK. The login page is displayed. If you do not change the password, click Cancel. The login page is displayed and you cannot log in to the web system.

    You need to change the password in the following situations:

    • If the login password expires, the system forcibly requires you to change the password.
    • If you log in to the system for the first time after the password is changed by another user, the system forcibly requires you to change the password.
    • If you log in to the system within the password expiration notification period, the system notifies you of the password expiration time and advises you to change the password.

      After changing the password, click OK. If the password is changed successfully, the system displays the message "Your password has been modified successfully". Click OK. The login page is displayed. If you do not change the password, click Cancel. The Device Information page is displayed.

Where Is the Management Port of the Router Located?

How to Configure the User Name and Password for Logging In to the Web System

Where Is the Management Port of the Router Located?

Generally, the management port is marked with the MGMT or Management silkscreen. After connecting a PC to the management port of the device, you can enter the default user name and password on the HTTPS page to log in to the device.

Figure 1-10 Management port

Table 1-1 lists the devices whose management port is not marked with the MGMT or Management silkscreen.

Table 1-1 Devices whose management port is not marked with the MGMT or Management silkscreen

Series

Model

Interface

AR150 series

Models except the AR156W

FE3

Ethernet0/0/3

AR160 series

AR168F, AR168F-4P, and AR169F

GE0

GigabitEthernet0/0/0

AR200 series

All models

FE6

Ethernet0/0/6

AR150-S series

AR151-S, AR151W-P-S, and AR151G-U-S

FE0

Ethernet0/0/0

AR200-S series

All models

AR530 series

AR550 series

SRG550 series

How to Configure the User Name and Password for Logging In to the Web System

Web System Account Rights

You can configure the user level on the CLI or web system. The CLI only allows you to downgrade your own user level or configure a user level for users at lower levels. The web system only allows you to configure access levels of other users.

If the level of a user is 0 or no level is configured for the user, the user does not have the right to log in to the web system. The mapping between user levels and users is as follows:

  • If the user level is 1, the user is a common administrator.
  • If the user level is 2, the user is an enterprise administrator.
  • If the user level is in the range from 3 to 15, the user is a super administrator.

Procedure

  1. Run the system-view command to enter the system view.
  2. Run the aaa command to enter the AAA view.
  3. Run the local-user user-name password irreversible-cipher password command to set the web user name and password.

    By default, the system has a local user admin. For details about the default password of this user, see What Is the Default Password for Logging In to the AR Router?. You can directly use the user name and password to log in to the web system. After login, the system forcibly requires you to change the password to ensure security.

  4. Run the local-user user-name privilege level level command to configure the user level.

    By default, the level of the local user admin is 15, which indicates that the local user is a super administrator.

How to Log In to the Router Through the Mini USB Port (CLI)

If no console port is available on a PC, you can connect a USB port on the PC to the mini USB port of the device and enter the default user name and password to log in to and then configure and manage the device.

The device supports the mini USB Type-B cable, which needs to be purchased separately.

To obtain the mini USB driver, visit http://support.huawei.com/enterprise, search for AR_MiniUSB_driver, and download the corresponding file. The mini USB driver supports only Windows XP, Windows Vista, and Windows 7 operating systems.

Procedure

  1. Install the mini USB driver on the PC.

    1. Use a mini USB cable to connect a USB port on the PC to the mini USB port of the device.
      NOTE:

      If you reinstall the mini USB cable or manually terminate the serial connection when using the mini USB port, open a new serial connection window after the serial connection is restored. The original serial connection window is invalid.

    2. As shown in Figure 1-11, double-click the driver installation file on the PC and click Next.
      Figure 1-11 Running the mini USB driver on the PC

    3. As shown in Figure 1-12, select I accept the terms in the license agreement and click Next.
      Figure 1-12 Accepting the terms in the license agreement

    4. As shown in Figure 1-13, click Change to change the driver directory, and click Next.
      Figure 1-13 Specifying the driver directory
    5. As shown in Figure 1-14, click Install and decompress the driver. When the system finishes decompressing the driver, click Finish.
      Figure 1-14 Finishing driver decompression
    6. Find the DISK1 folder in the file decompression directory specified in substep 4, and double-click setup.exe in the folder.
    7. Click Next. Select I accept the terms in the license agreement and click Next to install the driver.
    8. Click Finish. Right-click Computer, and choose Manage > Device Manager > Ports(COM&LPT). The system displays TUSB3410 Device, indicating the driver that has been installed.
    NOTE:

    If there is no TUSB3410 Device in the device manager, reinstall the driver or use another mini USB cable to connect the device to the PC.

  2. Start the terminal emulation software on the PC. Create a connection, select the connected port, and set communication parameters. (The following uses SecureCRT as an example.)

    1. Click to establish a connection.
      Figure 1-15 Establishing a connection
    2. Set the connected port and communication parameters.

      Select the connected port based on actual situations. For example, you can view port information and select the connected port in Device Manager on Windows.

      Communication parameters of the terminal emulation software must be consistent with those of the device. The default settings are as follows: 9600 bit/s baud rate, 8 data bits, 1 stop bit, no parity check, and no flow control.

    NOTE:

    By default, no flow control mode is configured on the device. Because RTS/CTS is selected in the software by default, you need to deselect RTS/CTS; otherwise, you cannot enter commands.

    If you modify the serial port communication parameters on the device, you must make the same modifications on the PC and then create a connection again.

    Figure 1-16 Setting the connected port and communication parameters

  3. Click Connect. The following information is displayed, prompting you to set a password. For details about the default password for logging in to the device, see What Is the Default Password for Logging In to the AR Router?.

What If I Forget the Login Password?

Login Through the Console or Mini USB Port

You can use the BootROM menu of the device to clear the lost password for login through the console port or mini USB port. After starting the device, set a new password and save your configuration.

  1. Connect a terminal to the console port of the device and restart the device. When the following information is displayed, press Ctrl+B and enter the BootROM password to enter the BootROM menu.

    If you do not press Ctrl+B within the timeout interval (several seconds), you have to restart the device again.

    Press Ctrl+B to break auto startup ...  1   
    Enter Password:       //Enter the BootROM password.
  2. In the BootROM menu, select Password Manager and then Clear the console login password.
  3. Select Return and Default Startup in turn to restart the device.
  4. After the system starts, you can log in through the console port without password authentication. You can set an authentication mode and a password for the console user interface according to service requirements.
NOTE:

Configuring the authentication mode and password for the console user interface is necessary; otherwise, after the device is restarted, users still need to be authenticated using the original password when they log in to the device through the console port.

Login Through the Management Port

Super administrator

  • Restoring the factory default settings on the CLI: Run the factory-configuration reset command in the user view to restore the factory default settings after the device restarts.
  • Configuring the web login password on the CLI: Run the local-user user-name password irreversible-cipher password command in the AAA view to set the web user name and password.

Non-super administrator

The super administrator can change the password of a non-super administrator on the User Management tab page.

Figure 1-17 Changing the password of a non-super administrator

Login Through Telnet

  • Restoring the factory default settings on the CLI: Run the factory-configuration reset command in the user view to restore the factory default settings after the device restarts.
  • On the VTY user interface, run the set authentication password cipher command to set the password for password authentication or the local-user user-name password irreversible-cipher password command to configure the user name and password for AAA authentication. During password authentication, the user name does not need to be entered. To prevent unauthorized users from accessing the device, you are advised to use the AAA authentication mode.
Translation
Download
Updated: 2019-07-12

Document ID: EDOC1100083329

Views: 1547

Downloads: 67

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next