02-Login Operation

Download

Table of Contents

Chapter 1 Logging into an Ethernet Switch. 1-1

1.1 Logging into an Ethernet Switch. 1-1

1.2 Introduction to the User Interface. 1-1

1.2.1 Supported User Interfaces. 1-1

1.2.2 User Interface Number 1-1

1.2.3 Common User Interface Configuration. 1-2

Chapter 2 Logging in through the Console Port 2-1

2.1 Introduction. 2-1

2.2 Logging in through the Console Port 2-1

2.3 Console Port Login Configuration. 2-3

2.3.1 Common Configuration. 2-3

2.3.2 Console Port Login Configurations for Different Authentication Modes. 2-4

2.4 Console Port Login Configuration with Authentication Mode Being None. 2-6

2.4.1 Configuration Procedure. 2-6

2.4.2 Configuration Example. 2-8

2.5 Console Port Login Configuration with Authentication Mode Being Password. 2-9

2.5.1 Configuration Procedure. 2-9

2.5.2 Configuration Example. 2-11

2.6 Console Port Login Configuration with Authentication Mode Being Scheme. 2-13

2.6.1 Configuration Procedure. 2-13

2.6.2 Configuration Example. 2-15

Chapter 3 Logging in through Telnet 3-1

3.1 Introduction. 3-1

3.1.1 Common Configuration. 3-1

3.1.2 Telnet Configurations for Different Authentication Modes. 3-2

3.2 Telnet Configuration with Authentication Mode Being None. 3-3

3.2.1 Configuration Procedure. 3-3

3.2.2 Configuration Example. 3-5

3.3 Telnet Configuration with Authentication Mode Being Password. 3-6

3.3.1 Configuration Procedure. 3-6

3.3.2 Configuration Example. 3-8

3.4 Telnet Configuration with Authentication Mode Being Scheme. 3-10

3.4.1 Configuration Procedure. 3-10

3.4.2 Configuration Example. 3-13

3.5 Telneting to a Switch. 3-15

3.5.1 Telneting to a Switch from a Terminal 3-15

3.5.2 Telneting to another Switch from the Current Switch. 3-17

Chapter 4 Logging in Using Modem.. 4-1

4.1 Introduction. 4-1

4.2 Configuration on the Administrator Side. 4-1

4.3 Configuration on the Switch Side. 4-1

4.3.1 Modem Configuration. 4-1

4.3.2 Switch Configuration. 4-2

4.4 Modem Connection Establishment 4-3

4.5 Modem Attributes Configuration. 4-5

4.5.1 Configuration Prerequisites. 4-5

4.5.2 Configuration Procedure. 4-5

4.5.3 Configuration Example. 4-6

Chapter 5 Logging in through NMS. 5-1

5.1 Introduction. 5-1

5.2 Connection Establishment Using NMS. 5-2

Chapter 6 User Control 6-1

6.1 Introduction. 6-1

6.2 Controlling Telnet Users. 6-1

6.2.1 Controlling Telnet Users by Source IP Addresses. 6-1

6.2.2 Controlling Telnet Users by Source and Destination IP Addresses. 6-2

6.3 Controlling Network Management Users by Source IP Addresses. 6-3

6.3.1 Prerequisites. 6-3

6.3.2 Controlling Network Management Users by Source IP Addresses. 6-4

6.3.3 Configuration Example. 6-5

 


Chapter 1  Logging into an Ethernet Switch

1.1  Logging into an Ethernet Switch

You can log into an S7500 series Ethernet switch in one of the following ways:

l           Logging in locally through the Console port

l           Telneting locally or remotely to an Ethernet port

l           Telneting to the Console port using a modem

l           Logging in through NMS (network management station)

1.2  Introduction to the User Interface

1.2.1  Supported User Interfaces

S7500 series Ethernet switch supports two types of user interfaces: AUX and VTY.

Table 1-1 Description on user interface

User interface

Applicable user

Port used

Description

AUX

Users logging in through the Console port

Console port

Each switch can accommodate one AUX user.

VTY

Telnet users and SSH users

Ethernet port

Each switch can accommodate up to five VTY users.

 

&  Note:

The AUX port and the Console port of a H3C series switch are the same port. You will be in the AUX user interface if you log in through this port.

 

1.2.2  User Interface Number

Two kinds of user interface index exist: absolute user interface index and relative user interface index.

1)         The absolute user interface indexes are as follows:

l           AUX user interface: 0

l           VTY user interfaces: Numbered after AUX user interfaces and increases in the step of 1

2)         A relative user interface index can be obtained by appending a number to the identifier of a user interface type. It is generated by user interface type. The relative user interface indexes are as follows:

l           AUX user interface: AUX 0

l           VTY user interfaces: VTY 0, VTY 1, VTY 2, and so on.

1.2.3  Common User Interface Configuration

Table 1-2 Common user interface configuration

Operation

Command

Description

Lock the current user interface

lock

Optional

Execute this command in user view.

A user interface is not locked by default.

Specify to send messages to all user interfaces/a specified user interface

send { all | number | type number }

Optional

Execute this command in user view.

Disconnect a specified user interface

free user-interface [ type ] number

Optional

Execute this command in user view.

Enter system view

system-view

Enter user interface view

user-interface [ type ] first-number [ last-number ]

Set the command that is automatically executed when a user logs into the user interface

auto-execute command text

Optional

By default, no command is automatically executed when a user logs into a user interface.

Display the information about the current user interface/all user interfaces

display users [ all ]

Optional

These two commands can be executed in any view.

Display the physical attributes and configuration of the current/a specified user interface

display user-interface [ type number | number ]

 

  Caution:

The auto-execute command command may cause you unable to perform common configuration in the user interface, so use it with caution.

Before executing the auto-execute command command and save your configuration, make sure you can log into the switch in other modes and cancel the configuration.

 


Chapter 2  Logging in through the Console Port

2.1  Introduction

To log in through the Console port is the most common way to log into a switch. It is also the prerequisite to configure other login methods. Normally, you can log into an S7500 series Ethernet switch through its Console port.

To log into an Ethernet switch through its Console port, the communication configuration of the user terminal must be in accordance with that of the Console port.

Table 2-1 lists the default settings of a Console port.

Table 2-1 The default settings of a Console port

Setting

Default

Baud rate

9,600 bps

Flow control

None

Check mode (Parity)

None

Stop bits

1

Data bits

8

 

After logging into a switch, you can perform configuration for AUX users. Refer to section 2.3  Console Port Login Configuration” for more.

2.2  Logging in through the Console Port

Following are the procedures to connect to a switch through the Console port.

1)         Connect the serial port of your PC/terminal to the Console port of the switch, as shown in Figure 2-1.

Figure 2-1 Diagram for setting the connection to the Console port

2)         If you use a PC to connect to the Console port, launch a terminal emulation utility (such as Terminal in Windows 3.X or HyperTerminal in Windows 9X) and perform the configuration shown in Figure 2-2 through Figure 2-4 for the connection to be created. Normally, the parameters of a terminal are configured as those listed in Table 2-1. And the type of the terminal is set to VT100.

Figure 2-2 Create a connection

Figure 2-3 Specify the port used to establish the connection

Figure 2-4 Set port parameters

3)         Turn on the switch. You will be prompted to press the Enter key if the switch successfully completes POST (power-on self test). The prompt (such as <H3C>) appears after you press the Enter key.

4)         You can then configure the switch or check the information about the switch by executing the corresponding commands. You can also acquire help by type the ? character. The commands available on a switch are described in the command manuals.

2.3  Console Port Login Configuration

2.3.1  Common Configuration

Table 2-2 lists the common configuration of Console port login.

Table 2-2 Common configuration of Console port login

Configuration

Remarks

Console port configuration

Baud rate

Optional

The default baud rate is 9,600 bps.

Check mode

Optional

By default, the check mode of the Console port is set to “none”, which means no check bit.

Stop bits

Optional

The default stop bits of a Console port is 1.

Data bits

Optional

The default data bits of a Console port is 8.

AUX user interface configuration

Configure the command level available to the users logging into the AUX user interface

Optional

By default, commands of level 3 are available to the users logging into the AUX user interface.

Terminal configuration

Make terminal services available

Optional

By default, terminal services are available in all user interfaces

Set the maximum number of lines the screen can contain

Optional

By default, the screen can contain up to 24 lines.

Set history command buffer size

Optional

By default, the history command buffer can contain up to 10 commands.

Set the timeout time of a user interface

Optional

The default timeout time is 10 minutes.

 

  Caution:

Changing of Console port configuration terminates the connection to the Console port. To establish the connection again, you need to modify the configuration of the termination emulation utility running on your PC accordingly. Refer to section 2.2  Logging in through the Console Port” for more.

 

2.3.2  Console Port Login Configurations for Different Authentication Modes

Table 2-3 lists Console port login configurations for different authentication modes.

Table 2-3 Console port login configurations for different authentication modes

Authentication mode

Console port login configuration

Remarks

None

Perform common configuration

Perform common configuration for Console port login

Optional

Refer to section 2.3.1  Common Configuration” for more.

Password

Configure the password

Configure the password for local authentication

Required

Perform common configuration

Perform common configuration for Console port login

Optional

Refer to section 2.3.1  Common Configuration” for more.

Scheme

Specify to perform local authentication or RADIUS authentication

AAA configuration specifies whether to perform local authentication or RADIUS authentication

Optional

Local authentication is performed by default.

Refer to the AAA&RADIUS&HWTACACS&EAD module for more.

Configure user name and password

 

Configure user names and passwords for local/RADIUS users

Required

l      The user name and password of a local user are configured on the switch.

l      The user name and password of a RADIUS user are configured on the RADIUS server. Refer to user manual of RADIUS server for more.

Manage AUX users

Set service type for AUX users

Required

Perform common configuration

Perform common configuration for Console port login

Optional

Refer to section 2.3.1  Common Configuration” for more.

 

&  Note:

Changes of the authentication mode of Console port login will not take effect unless you quit the command-line interface and then enter it again.

 

2.4  Console Port Login Configuration with Authentication Mode Being None

2.4.1  Configuration Procedure

Table 2-4 Console port login configuration with the authentication mode being none

Operation

Command

Description

Enter system view

system-view

Enter AUX user interface view

user-interface aux 0

Configure not to authenticate users

authentication-mode none

Required

By default, users logging in through the Console port are not authenticated.

Configure the Console port

Set the baud rate

speed speed-value

Optional

The default baud rate of an AUX port (also the Console port) is 9,600 bps.

Set the check mode

parity { even | mark | none | odd | space }

Optional

By default, the check mode of a Console port is set to none, that is, no check bit.

Set the flow control mode

flow-control { hardware | none | software }

Optional

By default, a Console port does not perform flow control.

Set the stop bits

stopbits { 1 | 1.5 | 2 }

Optional

The stop bits of a Console port is 1.

Set the data bits

databits { 7 | 8 }

Optional

The default data bits of a Console port is 8.

Configure the command level available to users logging into the user interface

user privilege level level

Optional

By default, commands of level 3 are available to users logging into the AUX user interface.

Make terminal services available

shell

Optional

By default, terminal services are available in all user interfaces.

Set the maximum number of lines the screen can contain

screen-length screen-length

Optional

By default, the screen can contain up to 24 lines.

You can use the screen-length 0 command to disable the function to display information in pages.

Set the history command buffer size

history-command max-size value

Optional

The default history command buffer size is 10. That is, a history command buffer can store up to 10 commands by default.

Set the timeout time for the user interface

idle-timeout minutes [ seconds ]

Optional

The default timeout time of a user interface is 10 minutes.

With the timeout time being 10 minutes, the connection to a user interface is terminated if no operation is performed in the user interface within 10 minutes.

You can use the idle-timeout 0 command to disable the timeout function.

 

Note that the command level available to users logging into a switch depends on both the authentication-mode none command and the user privilege level level command, as listed in the following table.

Table 2-5 Determine the command level (A)

Scenario

Command level

Authentication mode

User type

Command

None (authentication-mode none)

Users logging in through Console ports

The user privilege level level command not executed

Level 3

The user privilege level level command already executed

Determined by the level argument

 

2.4.2  Configuration Example

I. Network requirements

Assume that you are a level 3 VTY user and want to perform the following configuration for users logging in through the Console port:

l           Do not authenticate users logging in through the Console port.

l           Commands of level 2 are available to users logging into the AUX user interface.

l           The baud rate of the Console port is 19,200 bps.

l           The screen can contain up to 30 lines.

l           The history command buffer can contain up to 20 commands.

l           The timeout time of the AUX user interface is 6 minutes.

II. Network diagram

Figure 2-5  Network diagram for AUX user interface configuration (with the authentication mode being none)

III. Configuration procedure

# Enter system view.

<H3C> system-view

# Enter AUX user interface view.

[H3C] user-interface aux 0

# Specify not to authenticate users logging in through the Console port.

[H3C-ui-aux0] authentication-mode none

# Specify commands of level 2 are available to users logging into the AUX user interface.

[H3C-ui-aux0] user privilege level 2

# Set the baud rate of the Console port to 19,200 bps.

[H3C-ui-aux0] speed 19200

# Set the maximum number of lines the screen can contain to 30.

[H3C-ui-aux0] screen-length 30

# Set the maximum number of commands the history command buffer can store to 20.

[H3C-ui-aux0] history-command max-size 20

# Set the timeout time of the AUX user interface to 6 minutes.

[H3C-ui-aux0] idle-timeout 6

2.5  Console Port Login Configuration with Authentication Mode Being Password

2.5.1  Configuration Procedure

Table 2-6 Console port login configuration with the authentication mode being password

Operation

Command

Description

Enter system view

system-view

Enter AUX user interface view

user-interface aux 0

Configure to authenticate users using the local password

authentication-mode password

Required

By default, users logging into a switch through the Console port are not authenticated; while those logging in through Modems or Telnet are authenticated.

Set the local password

set authentication password { cipher | simple } password

Required

Configure the Console port

Set the baud rate

speed speed-value

Optional

The default baud rate of an AUX port (also the Console port) is 9,600 bps.

Set the check mode

parity { even | mark | none | odd | space }

Optional

By default, the check mode of a Console port is set to none, that is, no check bit.

Set the flow control mode

flow-control { hardware | none | software }

Optional

By default, a Console port does not perform flow control.

Set the stop bits

stopbits { 1 | 1.5 | 2 }

Optional

The default stop bits of a Console port is 1.

Set the data bits

databits { 7 | 8 }

Optional

The default data bits of a Console port is 8.

Configure the command level available to users logging into the user interface

user privilege level level

Optional

By default, commands of level 3 are available to users logging into the AUX user interface.

Make terminal services available to the user interface

shell

Optional

By default, terminal services are available in all user interfaces.

Set the maximum number of lines the screen can contain

screen-length screen-length

Optional

By default, the screen can contain up to 24 lines.

You can use the screen-length 0 command to disable the function to display information in pages.

Set history command buffer size

history-command max-size value

Optional

The default history command buffer size is 10. That is, a history command buffer can store up to 10 commands by default.

Set the timeout time for the user interface

idle-timeout minutes [ seconds ]

Optional

The default timeout time of a user interface is 10 minutes.

With the timeout time being 10 minutes, the connection to a user interface is terminated if no operation is performed in the user interface within 10 minutes.

You can use the idle-timeout 0 command to disable the timeout function.

 

Note that the level the commands of which are available to users logging into a switch depends on both the authentication-mode password and the user privilege level level command, as listed in the following table.

Table 2-7 Determine the command level (B)

Scenario

Command level

Authentication mode

User type

Command

Local authentication (authentication-mode password)

Users logging in through the AUX user interface

The user privilege level level command is not executed

Level 3

The user privilege level level command is already executed

Determined by the level argument

 

2.5.2  Configuration Example

I. Network requirements

Assume that you are a level 3 VTY user and want to perform the following configuration for users logging in through the Console port:

l           Authenticate users logging in through the Console port using the local password.

l           Set the local password to 123456 (in plain text).

l           The commands of level 2 are available to users logging into the AUX user interface.

l           The baud rate of the Console port is 19,200 bps.

l           The screen can contain up to 30 lines.

l           The history command buffer can store up to 20 commands.

l           The timeout time of the AUX user interface is 6 minutes.

II. Network diagram

Figure 2-6 Network diagram for AUX user interface configuration (with the authentication mode being password)

III. Configuration procedure

# Enter system view.

<H3C> system-view

# Enter AUX user interface view.

[H3C] user-interface aux 0

# Specify to authenticate users logging in through the Console port using the local password.

[H3C-ui-aux0] authentication-mode password

# Set the local password to 123456 (in plain text).

[H3C-ui-aux0] set authentication password simple 123456

# Specify commands of level 2 are available to users logging into the AUX user interface.

[H3C-ui-aux0] user privilege level 2

# Set the baud rate of the Console port to 19,200 bps.

[H3C-ui-aux0] speed 19200

# Set the maximum number of lines the screen can contain to 30.

[H3C-ui-aux0] screen-length 30

# Set the maximum number of commands the history command buffer can store to 20.

[H3C-ui-aux0] history-command max-size 20

# Set the timeout time of the AUX user interface to 6 minutes.

[H3C-ui-aux0] idle-timeout 6

2.6  Console Port Login Configuration with Authentication Mode Being Scheme

2.6.1  Configuration Procedure

Table 2-8