Strategy Partner :

02-Login Operation

Table of Contents

Chapter 1 Logging In to an Ethernet Switch. 1-1

1.1 Logging In to an Ethernet Switch. 1-1

1.2 Introduction to the User Interface. 1-1

1.2.1 Supported User Interfaces. 1-1

1.2.2 User Interface Index. 1-2

1.2.3 Common User Interface Configuration. 1-2

Chapter 2 Logging In Through the Console Port 2-1

2.1 Introduction. 2-1

2.2 Logging In Through the Console Port 2-1

2.3 Console Port Login Configuration. 2-4

2.3.1 Common Configuration. 2-4

2.3.2 Console Port Login Configurations for Different Authentication Modes. 2-5

2.4 Console Port Login Configuration with Authentication Mode Being None. 2-6

2.4.1 Configuration Procedure. 2-6

2.4.2 Configuration Example. 2-8

2.5 Console Port Login Configuration with Authentication Mode Being Password. 2-9

2.5.1 Configuration Procedure. 2-9

2.5.2 Configuration Example. 2-11

2.6 Console Port Login Configuration with Authentication Mode Being Scheme. 2-13

2.6.1 Configuration Procedure. 2-13

2.6.2 Configuration Example. 2-15

Chapter 3 Logging In Through Telnet 3-1

3.1 Introduction. 3-1

3.1.1 Common Configuration. 3-2

3.1.2 Telnet Configurations for Different Authentication Modes. 3-2

3.2 Telnet Configuration with Authentication Mode Being None. 3-4

3.2.1 Configuration Procedure. 3-4

3.2.2 Configuration Example. 3-5

3.3 Telnet Configuration with Authentication Mode Being Password. 3-6

3.3.1 Configuration Procedure. 3-6

3.3.2 Configuration Example. 3-8

3.4 Telnet Configuration with Authentication Mode Being Scheme. 3-9

3.4.1 Configuration Procedure. 3-9

3.4.2 Configuration Example. 3-12

3.5 Telnetting to a Switch. 3-13

3.5.1 Telnetting to a Switch from a Terminal 3-13

3.5.2 Telnetting to another Switch from the Current Switch. 3-16

Chapter 4 Logging In Using a Modem.. 4-1

4.1 Introduction. 4-1

4.2 Configuration on the Switch Side. 4-1

4.2.1 Modem Configuration. 4-1

4.2.2 Switch Configuration. 4-2

4.3 Modem Connection Establishment 4-3

Chapter 5 Logging In Through the Web-based Network Management System.. 5-1

5.1 Introduction. 5-1

5.2 Establishing an HTTP Connection. 5-1

5.3 Configuring the Login Banner 5-2

5.3.1 Configuration Procedure. 5-2

5.3.2 Configuration Example. 5-3

5.4 Enabling/Disabling the WEB Server 5-4

Chapter 6 Logging In Through NMS. 6-1

6.1 Introduction. 6-1

6.2 Connection Establishment Using NMS. 6-1

Chapter 7 Configuring Source IP Address for Telnet Service Packets. 7-1

7.1 Overview. 7-1

7.2 Configuring Source IP Address for Telnet Service Packets. 7-1

7.3 Displaying Source IP Address Configuration. 7-2

Chapter 8 User Control 8-1

8.1 Introduction. 8-1

8.2 Controlling Telnet Users. 8-2

8.2.1 Prerequisites. 8-2

8.2.2 Controlling Telnet Users by Source IP Addresses. 8-2

8.2.3 Controlling Telnet Users by Source and Destination IP Addresses. 8-2

8.2.4 Controlling Telnet Users by Source MAC Addresses. 8-3

8.2.5 Configuration Example. 8-4

8.3 Controlling Network Management Users by Source IP Addresses. 8-4

8.3.1 Prerequisites. 8-5

8.3.2 Controlling Network Management Users by Source IP Addresses. 8-5

8.3.3 Configuration Example. 8-6

8.4 Controlling Web Users by Source IP Address. 8-7

8.4.1 Prerequisites. 8-7

8.4.2 Controlling Web Users by Source IP Addresses. 8-7

8.4.3 Disconnecting a Web User by Force. 8-8

8.4.4 Configuration Example. 8-8

 

 


Chapter 1  Logging In to an Ethernet Switch

Go to these sections for information you are interested in:

l           Logging In to an Ethernet Switch

l           Introduction to the User Interface

 

&  Note:

l      A new configuration is added which specifies whether the copyright information is to be displayed when a user logs in through Telnet. See Telnet Configuration with Authentication Mode Being None, Telnet Configuration with Authentication Mode Being Password, and Telnet Configuration with Authentication Mode Being Scheme.

l      Another new configuration is added which allows the banner to be displayed when a user logs in through Web. See Configuring the Login Banner.

 

1.1  Logging In to an Ethernet Switch

You can log in to an S5600 Ethernet switch in one of the following ways:

l           Logging in locally through the console port

l           Logging in locally or remotely through an Ethernet port by means of Telnet or SSH

l           Telnetting to the console port using a modem

l           Logging in to the Web-based network management system

l           Logging in through NMS (network management station)

1.2  Introduction to the User Interface

1.2.1  Supported User Interfaces

 

&  Note:

The auxiliary (AUX) port and the console port of an H3C low-end and mid-range Ethernet switch are the same port (referred to as console port in the following part). You will be in the AUX user interface if you log in through this port.

 

S5600 series Ethernet switches support two types of user interfaces: AUX and VTY.

l           AUX user interface: A view when you log in through the AUX port. AUX port is a line device port.

l           Virtual type terminal (VTY) user interface: A view when you log in through VTY. VTY port is a logical terminal line used when you access the device by means of Telnet or SSH.

Table 1-1 Description on user interface

User interface

Applicable user

Port used

Remarks

AUX

Users logging in through the console port

Console port

Each switch can accommodate one AUX user.

VTY

Telnet users and SSH users

Ethernet port

Each switch can accommodate up to five VTY users.

 

1.2.2  User Interface Index

Two kinds of user interface index exist: absolute user interface index and relative user interface index.

1)         The absolute user interface indexes are as follows:

l           The absolute AUX user interfaces are numbered 0 through 7.

l           VTY user interface indexes follow AUX user interface indexes. The first absolute VTY user interface is numbered 8, the second is 9, and so on.

2)         A relative user interface index can be obtained by appending a number to the identifier of a user interface type. It is generated by user interface type. The relative user interface indexes are as follows:

l           AUX user interfaces are numbered from AUX0 to AUX7.

l           VTY user interfaces are numbered VTY0, VTY1, and so on.

 

&  Note:

S5600 series Ethernet switches support Fabric. A Fabric can contain up to eight devices. Accordingly, the AUX user interfaces in a Fabric can be numbered from AUX0 to AUX7, through which all the console ports of the units in a Fabric can be identified. Refer to the IRF Fabric part for information about Fabric.

 

1.2.3  Common User Interface Configuration

Follow these steps to configure common user interface:

To do…

Use the command…

Remarks

Lock the current user interface

lock

Optional

Available in user view

A user interface is not locked by default.

Specify to send messages to all user interfaces/a specified user interface

send { all | number | type number }

Optional

Available in user view

Free a user interface

free user-interface [ type ] number

Optional

Available in user view

Enter system view

system-view

Set the banner

header [ incoming | legal | login | shell ] text

Optional

By default, no banner is configured

Set a system name for the switch

sysname string

Optional

By default, the system name is H3C.

Enable copyright information displaying

copyright-info enable

Optional

By default, copyright displaying is enabled. That is, the copy right information is displayed on the terminal after a user logs in successfully.

Enter user interface view

user-interface [ type ] first-number [ last-number ]

Display the information about the current user interface/all user interfaces

display users [ all ]

Optional

Available in any view.

Display the physical attributes and configuration of the current/a specified user interface

display user-interface [ type number | number ]

Display the information about the current web users

display web users

 


Chapter 2  Logging In Through the Console Port

Go to these sections for information you are interested in:

l           Introduction

l           Logging In Through the Console Port

l           Console Port Login Configuration

l           Console Port Login Configuration with Authentication Mode Being None

l           Console Port Login Configuration with Authentication Mode Being Password

l           Console Port Login Configuration with Authentication Mode Being Scheme

2.1  Introduction

To log in through the console port is the most common way to log in to a switch. It is also the prerequisite to configure other login methods. By default, you can locally log in to an S5600 Ethernet switch through its console port only.

Table 2-1 lists the default settings of a console port.

Table 2-1 The default settings of a console port

Setting

Default

Baud rate

9,600 bps

Flow control

None

Check mode (Parity)

None

Stop bits

1

Data bits

8

 

To log in to a switch through the console port, make sure the settings of both the console port and the user terminal are the same.

After logging in to a switch, you can perform configuration for AUX users. Refer to Console Port Login Configuration for more.

2.2  Logging In Through the Console Port

Following are the procedures to connect to a switch through the console port.

1)         Connect the serial port of your PC/terminal to the console port of the switch, as shown in Figure 2-1.

Figure 2-1 Diagram for connecting to the console port of a switch

2)         If you use a PC to connect to the console port, launch a terminal emulation utility (such as Terminal in Windows 3.X or HyperTerminal in Windows 9X/Windows 2000/Windows XP. The following assumes that you are running Windows XP) and perform the configuration shown in Figure 2-2 through Figure 2-4 for the connection to be created. Normally, both sides (that is, the serial port of the PC and the console port of the switch) are configured as those listed in Table 2-1.

Figure 2-2 Create a connection

Figure 2-3 Specify the port used to establish the connection

Figure 2-4 Set port parameters

3)         Turn on the switch. You will be prompted to press the Enter key if the switch successfully completes POST (power-on self test). The prompt (such as <H3C>) appears after you press the Enter key, as shown in Figure 2-5.

Figure 2-5 HyperTerminal CLI

4)         You can then configure the switch or check the information about the switch by executing the corresponding commands. You can also acquire help by typing the ? character. Refer to related parts in this manual for information about the commands used for configuring the switch.

2.3  Console Port Login Configuration

2.3.1  Common Configuration

Table 2-2 Common configuration of console port login

Configuration

Remarks

Console port configuration

Baud rate

Optional

The default baud rate is 9,600 bps.

Check mode

Optional

By default, the check mode of the console port is set to “none”, which means no check bit.

Stop bits

Optional

The default stop bits of a console port is 1.

Data bits

Optional

The default data bits of a console port is 8.

AUX user interface configuration

Configure the command level available to the users logging in to the AUX user interface

Optional

By default, commands of level 3 are available to the users logging in to the AUX user interface.

Terminal configuration

Make terminal services available

Optional

By default, terminal services are available in all user interfaces

Set the maximum number of lines the screen can contain

Optional

By default, the screen can contain up to 24 lines.

Set history command buffer size

Optional

By default, the history command buffer can contain up to 10 commands.

Set the timeout time of a user interface

Optional

The default timeout time is 10 minutes.

 

  Caution:

The change to console port configuration takes effect immediately, so the connection may be disconnected when you log in through a console port and then configure this console port. To configure a console port, you are recommended to log in to the switch in other ways. To log in to a switch through its console port after you modify the console port settings, you need to modify the corresponding settings of the terminal emulation utility running on your PC accordingly in the dialog box shown in Figure 2-4.

 

2.3.2  Console Port Login Configurations for Different Authentication Modes

Table 2-3 Console port login configurations for different authentication modes

Authentication mode

Console port login configuration

Remarks

None

Perform common configuration

Perform common configuration for console port login

Optional

Refer to Table 2-2.

Password

Configure the password

Configure the password for local authentication

Required

Perform common configuration

Perform common configuration for console port login

Optional

Refer to Table 2-2.

Scheme

Specify to perform local authentication or remote RADIUS authentication

AAA configuration specifies whether to perform local authentication or RADIUS authentication

Optional

Local authentication is performed by default.

Refer to the AAA part for more.

Configure user name and password

Configure user names and passwords for local/RADIUS users

Required

The user name and password of a local user are configured on the switch.

The user name and password of a RADIUS user are configured on the RADIUS server. Refer to user manual of RADIUS server for more.

Manage AUX users

Set service type for AUX users

Required

Perform common configuration

Perform common configuration for console port login

Optional

Refer to Table 2-2.

 

&  Note:

Changes made to the authentication mode for console port login takes effect after you quit the command-line interface and then log in again.

 

2.4  Console Port Login Configuration with Authentication Mode Being None

2.4.1  Configuration Procedure

Follow these steps to configure console port login with the authentication mode being none:

To do…

Use the command…

Remarks

Enter system view

system-view

Enter AUX user interface view

user-interface aux 0

Configure not to authenticate users

authentication-mode none

Required

By default, users logging in through the console port (AUX user interface) are not authenticated.

Configure the console port

Set the baud rate

speed speed-value

Optional

The default baud rate of a console port is 9,600 bps.

Set the check mode

parity { even | none | odd }

Optional

By default, the check mode of a console port is none, that is, no check is performed.

Set the stop bits

stopbits { 1 | 1.5 | 2 }

Optional

The stop bits of a console port is 1.

Set the data bits

databits { 7 | 8 }

Optional

The default data bits of a console port is 8.

Configure the command level available to users logging in to the user interface

user privilege level level

Optional

By default, commands of level 3 are available to users logging in to the AUX user interface, and commands of level 0 are available to users logging in to the VTY user interface.

Enable terminal services

shell

Optional

By default, terminal services are available in all user interfaces.

Set the maximum number of lines the screen can contain

screen-length screen-length

Optional

By default, the screen can contain up to 24 lines.

You can use the screen-length 0 command to disable the function to display information in pages.

Set the history command buffer size

history-command max-size value

Optional

The default history command buffer size is 10. That is, a history command buffer can store up to 10 commands by default.

Set the timeout time for the user interface

idle-timeout minutes [ seconds ]

Optional

The default timeout time of a user interface is 10 minutes.

With the timeout time being 10 minutes, the connection to a user interface is terminated if no operation is performed in the user interface within 10 minutes.

You can use the idle-timeout 0 command to disable the timeout function.

 

2.4.2  Configuration Example

I. Network requirements

Assume that the switch is configured to allow users to log in through Telnet, and the current user level is set to the administrator level (level 3). Perform the following configurations for users logging in through the console port (AUX user interface).

l           Do not authenticate the users.

l           Commands of level 2 are available to the users logging in to the AUX user interface.

l           The baud rate of the console port is 19,200 bps.

l           The screen can contain up to 30 lines.

l           The history command buffer can contain up to 20 commands.

l           The timeout time of the AUX user interface is 6 minutes.

II. Network diagram

Figure 2-6  Network diagram for AUX user interface configuration (with the authentication mode being none)

III. Configuration procedure

# Enter system view.

<Sysname> system-view