H3C is a common switch and router. In order to manage multiple routers and switches, We can remotely control telnet or batch manage them. Now let's take a look at the specific content of the H3C telnet and console port logon configuration.
Level description
Level name
Command
0
Visit
Ping, tracert, telnet
1
Monitoring
Display, debugging
2
Configuration
Except for all command management-level configuration commands)
3
Management
File System commands, FTP commands, TFTP commands, and XMODEM commands
H3C telnet login with password only, Administrator permission
[Router] user-interface vty 0 4 [Router-ui-vty0-4] user privilege level 3 [Router-ui-vty0-4] set authentication password simple abc
H3C telnet only uses a password to log on. It is not administrator privilege.
[Router] super password level 3 simple super
[Router] user-interface vty 0 4 [Router-ui-vty0-4] user privilege level 1 [Router-ui-vty0-4] set authentication password simple abc
H3C telnet login with the username and password configured on the vro, Administrator permission
[Router] local-user admin password simple admin [Router] local-user admin service-type telnet [Router] local-user admin level 3
[Router] user-interface vty 0 4 [Router-ui-vty0-4] authentication-mode local
H3C telnet uses the username and password configured on the vro to log on. It is not administrator privilege.
[Router] super password level 3 simple super
[Router] local-user manage password simple manage [Router] local-user manage service-type telnet [Router] local-user manage level 2
[Router] user-interface vty 0 4 [Router-ui-vty0-4] authentication-mode local
Set a password for the console port and use the Administrator permission after logon.
[Router] user-interface con 0 [Router-ui-console0] user privilege level 3 [Router-ui-console0] set authentication password simple abc
Set a password for the console port and use non-administrator permissions after Logon
[Router] super password level 3 simple super
[Router] user-interface con 0 [Router-ui-console0] user privilege level 1 [Router-ui-console0] set authentication password simple abc
Set the user name and password for the console port, and use the Administrator permission after logon.
[Router] local-user admin password simple admin [Router] local-user admin service-type terminal [Router] local-user admin level 3
[Router] user-interface con 0 [Router-ui-console0] authentication-mode local
Set the user name and password for the console port, and use non-administrator permissions after Logon
[Router] super password level 3 simple super
[Router] local-user manage password simple manage [Router] local-user manage service-type terminal [Router] local-user manage level 2
[Router] user-interface con 0 [Router-ui-console0] authentication-mode local
Simple is plaintext, and cipher is encrypted. When the vro does not set the H3C telnet logon configuration, you cannot log on to the vrotelnet through H3C telnet, [Router-ui-vty0-4] acl 2000 inbound can allow only qualified users to remotely log on to the router through acl rules