Configuration of the Console port logon mode when the Authentication mode is None
# Go To The System View.
<H3C> system-view
# Go To The AUX User Interface view.
[H3C] user-interface aux 0
# You do not need to perform authentication when logging on to the vswitch through the Console port.
[H3C-ui-aux0] authentication-mode none
# Set the command level that can be accessed after logon from the AUX user interface to level 2.
[H3C-ui-aux0] user privilege level 2
# Set the baud rate of the Console port to 19200bit/s.
[H3C-ui-aux0] speed 19200
# Set up 30 lines of command to display on one screen of the terminal screen.
[H3C-ui-aux0] screen-length 30
# Set the history command buffer to store 20 commands.
[H3C-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[H3C-ui-aux0] idle-timeout 6
Configuration of Console port logon mode when the Authentication mode is Password
# Go To The System View.
<H3C> system-view
# Go To The AUX User Interface view.
[H3C] user-interface aux 0
# Set Password Authentication for users logging on to the vswitch through the Console port.
[H3C-ui-aux0] authentication-mode password
# Set the user's authentication password to display in plain text, and the password to 123456.
[H3C-ui-aux0] set authentication password simple 123456
# Set the command level that can be accessed after logon from the AUX user interface to level 2.
[H3C-ui-aux0] user privilege level 2
# Set the baud rate of the Console port to 19200bit/s.
[H3C-ui-aux0] speed 19200
# Set up 30 lines of command to display on one screen of the terminal screen.
[H3C-ui-aux0] screen-length 30
# Set the history command buffer to store 20 commands.
[H3C-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[H3C-ui-aux0] idle-timeout 6
Configuration of Console port logon mode when the Authentication mode is Scheme
# Go To The System View.
<H3C> system-view
# Create a local user guest and enter the local user view.
[H3C] local-user guest
# Set the local user's authentication password to display in plain text, and the password to 123456.
A [H3C-luser-guest] password simple 123456
# Set the service type of the local user to Terminal and the user level to 2.
[H3C-luser-guest] service-type terminal level 2
[H3C-luser-guest] quit
# Go To The AUX User Interface view.
[H3C] user-interface aux 0
# Set users logging on to the vswitch through the Console port to perform Scheme authentication.
[H3C-ui-aux0] authentication-mode scheme
# Set the baud rate of the Console port to 19200bit/s.
[H3C-ui-aux0] speed 19200
# Set up 30 lines of command to display on one screen of the terminal screen.
[H3C-ui-aux0] screen-length 30
# Set the history command buffer to store 20 commands.
[H3C-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[H3C-ui-aux0] idle-timeout 6
Configuration of Telnet logon mode when the Authentication mode is None
# Go To The System View.
<H3C> system-view
# Go To The VTY0 User Interface view.
[H3C] user-interface vty 0
# Set the Telnet user to log on to the vswitch through the VTY0 user interface without authentication.
[H3C-ui-vty0] authentication-mode none
# Set the command level that can be accessed after logging on from the VTY0 user interface to level 2.
[H3C-ui-vty0] user privilege level 2
# Set the VTY0 user interface to support the Telnet protocol.
The [H3C-ui-vty0] protocol inbound telnet
# Set the terminal screen of VTY0 to display 30 lines of commands on one screen.
[H3C-ui-vty0] screen-length 30
# Set the VTY0 user history command buffer to store 20 commands.
[H3C-ui-vty0] history-command max-size 20
# Set the VTY0 User Interface timeout to 6 minutes.
[H3C-ui-vty0] idle-timeout 6
Configuration of Telnet logon mode when the Authentication mode is Password
# Go To The System View.
<H3C> system-view
# Go To The VTY0 User Interface view.
[H3C] user-interface vty 0
# Set Password Authentication for Telnet users logging on to the vswitch through VTY0 Port
[H3C-ui-vty0] authentication-mode password
# Set the user's authentication password to display in plain text, and the password to 123456.
[H3C-ui-vty0] set authentication password simple 123456
# Set the command level that can be accessed after logging on from the VTY0 user interface to level 2.
[H3C-ui-vty0] user privilege level 2
# Set the VTY0 user interface to support the Telnet protocol.
The [H3C-ui-vty0] protocol inbound telnet
# Set the terminal screen of VTY0 to display 30 lines of commands on one screen.
[H3C-ui-vty0] screen-length 30
# Set the VTY0 user history command buffer to store 20 commands.
[H3C-ui-vty0] history-command max-size 20
# Set the VTY0 User Interface timeout to 6 minutes.
[H3C-ui-vty0] idle-timeout 6
Configuration of Telnet logon mode when the Authentication mode is Scheme
# Go To The System View.
<H3C> system-view
# Create a local user guest and enter the local user view.
[H3C] local-user guest
# Set the local user's authentication password to display in plain text, and the password to 123456.
A [H3C-luser-guest] password simple 123456
# Set the service type of VTY users to Telnet and the user level to 2.
[H3C-luser-guest] service-type telnet level 2
# Go To The VTY0 User Interface view.
[H3C] user-interface vty 0
# Set the Telnet user to log on to the vswitch through the VTY0 port for Scheme authentication.
[H3C-ui-vty0] authentication-mode scheme
# Set the VTY0 user interface to support the Telnet protocol.
The [H3C-ui-vty0] protocol inbound telnet
# Set the terminal screen of VTY0 to display 30 lines of commands on one screen.
[H3C-ui-vty0] screen-length 30
# Set the VTY0 user history command buffer to store 20 commands.
[H3C-ui-vty0] history-command max-size 20
# Set the VTY0 User Interface timeout to 6 minutes.
[H3C-ui-vty0] idle-timeout 6
Use the Console port to execute the following commands on the Super Terminal to configure the Ethernet switch to manage VLAN
IP address.
<H3C> system-view
[H3C] interface Vlan-interface 1 enters the management VLAN)
[H3C-Vlan-interface1] ip address 202.38.160.92 255.255.255.0 Ethernet switch configuration
The IP address of the Management VLAN is 202.38.160.92, And the subnet mask is 255.255.255.0)
Log On Through WEB Network Management
1. You must configure the Console port correctly before logging on to the Ethernet switch through the WEB.
IP addresses of VLAN interfaces managed by Ethernet Switches
2. Add the WEB users of the Ethernet switch through the Console port, and set the user level to 3 Management Level
User)
[H3C] set the user name as admin in local-user admin)
[H3C-luser-admin] service-type telnet level 3 set level to 3)
[H3C-luser-admin] password simple admin set authentication password to admin)
Z. Configure the static route from the vswitch to the Gateway
[H3C] ip route-static 0.0.0.0 255.255.255.255 192.168.0.50 (the IP address of the gateway is
192.168.0.50)
3. Disable/start the Web Server
Disable Web Server
Ip http shutdown
Start Web Server
Undo ip http shutdown
Configure a port-based VLAN
# Create VLAN2 and go to its view.
<H3C> system-view
[H3C] vlan 2
# Specify the VLAN2 description string as home.
A [H3C-vlan2] description home
# Add ports Ethernet1/0/1 and Ethernet1/0/2 To vlan2.
[H3C-vlan2] port Ethernet 1/0/1 Ethernet 1/0/2
# Create VLAN3 and go to its view.
[H3C-vlan2] vlan 3
# Add ports Ethernet1/0/3 and Ethernet1/0/4 to vlan3.
[H3C-vlan3] port Ethernet 1/0/3 Ethernet 1/0/4
Configure the IP address of a VLAN Interface
Configure the IP address of VLAN Interface 1.
<H3C> system-view
[H3C] interface Vlan-interface 1
[H3C-Vlan-interface1] ip address 129.2.2.1 255.255.255.0
Typical SNMP configuration example
1. Networking requirements
Z network management workstation NMS) is connected to Switch A over Ethernet. the IP address of the network management workstation is
10.10.10.1, the IP address of the VLAN Interface of Switch A is 10.10.10.2.
Z performs the following configuration on Switch A: Set the group name and access permission, the administrator ID, and the contact
Method and the switch location information, allow the switch to send Trap messages.
Procedure
# Set groups, groups, and users.
<H3C> system-view
[H3C] snmp-agent
[H3C] snmp-agent sys-info version all
[H3C] snmp-agent community write public
[H3C] snmp-agent mib-view include internet 1.3.6.1
[H3C] snmp-agent group v3 managev3group write-view internet
[H3C] snmp-agent usm-user v3 managev3user managev3group
# Set the VLAN interface used by the network management to VLAN 2, and add the ports Ethernet1/0/2 for the network management.
In VLAN2, configure the IP address 10.10.10.2 for the VLAN2 interface.
[H3C] vlan 2
[H3C-vlan2] port Ethernet 1/0/2
[H3C-vlan2] quit
[H3C] interface Vlan-interface 2
[H3C-Vlan-interface2] ip address 10.10.10.2 255.255.255.0
[H3C-Vlan-interface2] quit
# Send Trap packets to the network management workstation 10.10.10.1. The group name is public.
[H3C] snmp-agent trap enable standard authentication
[H3C] snmp-agent trap enable standard coldstart
[H3C] snmp-agent trap enable standard linkup
[H3C] snmp-agent trap enable standard linkdown
[H3C] snmp-agent target-host trap address udp-domain 10.10.10.1 udp-port 5000
Params securityname public
The above is compiled by myself. For more in-depth research, please download the official technical documentation
Http://down.51cto.com/data/909124
This article is from the blog "make record a habit", please be sure to keep this http://dnuser.blog.51cto.com/4863891/1271653