华为交换机Console口属性配置

更新时间:2023-07-07 20:55:55 阅读: 评论:0

华为交换机Console⼝属性配置华为交换机Console⼝属性配置
⼀、设置通过账号和密码(AAA验证)登陆Console⼝
1. 进⼊ Console ⽤户界⾯视图
<Huawei>system-view
[Huawei]ur-interface console 0
[Huawei-ui-console0]
2. 在 Console ⽤户界⾯视图下,设置⽤户验证⽅式为 AAA 验证
[Huawei-ui-console0]authentication-mode ?
aaa      AAA authentication
none      Login without checking          //⽆需验证直接登陆console⼝
password  Authentication through the password of a ur terminal interface      //只通过输⼊密码登陆console⼝[Huawei-ui-console0]authentication-mode aaa
3. 进⼊AAA视图,配置登 Console ⼝的账号和密码
[Huawei-ui-console0]q
[Huawei]aaa
[Huawei-aaa]local-ur ?
STRING<1-64>  Ur name, in form of 'ur@domain'. Can u wildcard '*',
while displaying and modifying, such as *@isp,ur@*,*@*.Can
not include invalid character / \ : * ? " < > | @ '
[Huawei-aaa]local-ur admin ?
access-limit  Set access limit of ur(s)
ftp-directory  Set ur(s) FTP directory permitted
idle-timeout  Set the timeout period for terminal ur(s)
password      Set password
privilege      Set admin ur(s) level
rvice-type  Service types for authorized ur(s)
state          Activate/Block the ur(s)
[Huawei-aaa]local-ur admin password ?
cipher  Ur password with cipher text      //以密⽂⽅式显⽰⼝令
simple  Ur password with plain text      //以明⽂⽅式显⽰⼝令
[Huawei-aaa]local-ur admin password cipher ?
STRING<1-16>/<24>  The UNENCRYPTED/ENCRYPTED password string
[Huawei-aaa]local-ur admin password cipher 123456
Info: Add a new ur.
林彪简介/
/查看账户信息
[Huawei-aaa]display local-ur
----------------------------------------------------------------------------
Ur-name                      State  AuthMask  AdminLevel
----------------------------------------------------------------------------
admin                          A      A        -
----------------------------------------------------------------------------
Total 1 ur(s)
4. 设置登陆 Console 的账号和密码的服务类型为 Console(terminal)类型
[Huawei-aaa]local-ur admin ?
access-limit  Set access limit of ur(s)
ftp-directory  Set ur(s) FTP directory permitted
idle-timeout  Set the timeout period for terminal ur(s)
password      Set password
privilege      Set admin ur(s) level
rvice-type  Service types for authorized ur(s)
state          Activate/Block the ur(s)
[Huawei-aaa]local-ur admin rvice-type ?
8021x    802.1x ur
bind      Bind authentication ur
ftp      FTP ur
http      Http ur
ppp      PPP ur
ssh      SSH ur掌舵人
telnet    Telnet  ur
terminal  Terminal ur
web      Web authentication ur
x25-pad  X25-pad ur
[Huawei-aaa]local-ur admin rvice-type terminal ?
8021x    802.1x ur
bind    Bind authentication ur
ftp      FTP ur
http    Http ur
ppp      PPP ur
ssh      SSH ur
telnet  Telnet  ur
web      Web authentication ur
x25-pad  X25-pad ur
<cr>
[Huawei-aaa]local-ur admin rvice-type terminal
//再次查看账户信息
[Huawei-aaa]display local-ur
----------------------------------------------------------------------------
Ur-name                      State  AuthMask  AdminLevel
-
---------------------------------------------------------------------------
admin                          A      M        -
----------------------------------------------------------------------------
Total 1 ur(s)
//保存配置
<Huawei>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y      //输⼊y,确认
Now saving the current configuration to the slot 0.
Apr  6 2021 16:09:10-08:00 Huawei %%01CFM/4/SAVE(l)[55]:The ur cho Y when de
ciding whether to save the configuration to the device.
Save the configuration successfully.
⼆、设置只通过密码登陆 Console ⼝捉狐
1. 进⼊ Console ⽤户界⾯视图,设置只通过密码登陆 Console ⼝模式
<Huawei>system-view
[Huawei]ur-interface console 0
[Huawei-ui-console0]authentication-mode password
2. 设置验证密码,输⼊的密码可以是明⽂或密⽂
[Huawei-ui-console0]t authentication ?
password  Set the password for a ur interface
[Huawei-ui-console0]t authentication password ?
cipher  Set the password with cipher text        //以密⽂⽅式显⽰⼝令
simple  Set the password in plain text          //以明⽂⽅显⽰⼝令
[Huawei-ui-console0]t authentication password cipher ?快餐文化
STRING<1-16>/<24>  Plain text/cipher text password
[Huawei-ui-console0]t authentication password cipher 123456
//查看操作的步骤
[Huawei-ui-console0]display this
#
ur-interface con 0
authentication-mode password
t authentication password cipher yLST2)ywQ@:.`&R&e7S(bTi#          //密码加密处理了
ur-interface vty 0 4
#
return
//保存配置枸杞盆栽
<Huawei>save
The current configuration will be written to the device.
Are you sure to continue?[Y/N]y      //输⼊y,确认
Now saving the current configuration to the slot 0.
Apr  6 2021 16:09:10-08:00 Huawei %%01CFM/4/SAVE(l)[55]:The ur cho Y when de
ciding whether to save the configuration to the device.
Save the configuration successfully.
1. 输⼊的密码可以是明⽂或者密⽂,当不指定cipher password参数时,将采⽤交互⽅式输⼊明⽂密码;
2. 当指定cipher password参数时,既可以输⼊明⽂密码也可以输⼊密⽂密码,但都将以密⽂形式保存在配置⽂件中。
3. 当⽤户输⼊密码时,直接以明⽂形式输⼊存在安全风险,建议⽤户以交互式⽅式输⼊。
三、设置直接登陆 Console ⼝,⽆需验证
<Huawei>system-view
甲午殇思[Huawei]ur-interface console 0
[Huawei-ui-console0]authentication-mode none
四、配置Console⽤户界⾯的⽤户优先级<Huawei>system-view
[Huawei]ur-interface console 0
[Huawei-ui-console0]ur privilege level ?
INTEGER<0-15>  Set a priority
[Huawei-ui-console0]ur privilege level 3
⽤户级别和命令级别对应关系表:
⽤户级
别命令级别
级别名
说明
00参观级⽹络诊断⼯具命令(ping、tracert)、从本设备出发访问外部设备的命令(Telnet客户端)等。
10,1监控级⽤于系统维护,包括display等命令。
说明:并不是所有display命令都是监控级,⽐如display current-configuration命令和display saved-configuration命令是3级管理级。
20,1,2配置级业务配置命令,包括路由、各个⽹络层次的命令,向⽤户提供直接⽹络服务。
3~150,1,2,3管理级⽤于系统基本运⾏的命令,对业务提供⽀撑作⽤,包括⽂件系统、FTP、TFTP下载、⽤户管理命令、命令级别设置命令;
⽤于业务故障诊断的debugging命令等。
1. ⽤户可以配置⽤户优先级,实现对不同⽤户访问设备权限的限制,增加设备管理的安全性。
2. ⽤户的优先级分为16个级别,级别标识为0~15,标识越⾼则优先级越⾼。
3. ⽤户的优先级和命令的优先级是相对应的,即⽤户只能使⽤等于或低于⾃⼰级别的命令。
4. 缺省情况下,Console⼝⽤户界⾯对应的默认命令访问级别是15。
5. 如果⽤户界⾯下配置的命令级别访问权限与⽤户名本⾝对应的操作权限冲突,以⽤户名本⾝对应的级别为准。
五、查看 Console ⽤户界⾯信息
<Huawei>display ur-interface console 0
Idx  Type    Tx/Rx      Modem Privi ActualPrivi Auth  Int
+ 0    CON 0    9600      -    3    3          N    -
+    : Current UI is active.
F    : Current UI is active and work in async mode.
Idx  : Absolute index of UIs.
画公主裙子Type : Type and relative index of UIs.
Privi: The privilege of UIs.
ActualPrivi: The actual privilege of ur-interface.
Auth : The authentication mode of UIs.
A: Authenticate u AAA.
N: Current UI need not authentication.
P: Authenticate u current UI's password.
Int  : The physical location of UIs.
六、清除已经保存的配置
<Huawei>ret saved-configuration
Warning: The action will delete the saved configuration in the device.
The configuration will be erad to reconfigure. Continue? [Y/N]:y        //输⼊y,确认清除
Warning: Now clearing the configuration in the device.
Apr  6 2021 16:29:00-08:00 Huawei %%01CFM/4/RST_CFG(l)[0]:The ur cho Y when
deciding whether to ret the saved configuration.
Info: Succeeded in clearing the configuration in the device.
//配置虽然清除了,但是配置的账户和密码还有效,重启之后仍任需要密码
<Huawei>system-view
[Huawei]aaa
[Huawei-aaa]display local-ur
----------------------------------------------------------------------------
Ur-name                      State  AuthMask  AdminLevel
----------------------------------------------------------------------------
excel游戏admin                          A      M        -
----------------------------------------------------------------------------
Total 1 ur(s)
[Huawei-aaa]undo local-ur admin      //删除账户包括密码
[Huawei-aaa]display local-ur
Total 0 ur(s)
<Huawei>reboot
或者设置⽆需验证登陆 Console ⼝
[Huawei]ur-interface console 0
[Huawei-ui-console0]authentication-mode none

本文发布于:2023-07-07 20:55:55,感谢您对本站的认可!

本文链接:https://www.wtabcd.cn/fanwen/fan/82/1084267.html

版权声明:本站内容均来自互联网,仅供演示用,请勿用于商业和其他非法用途。如果侵犯了您的权益请与我们联系,我们将在24小时内删除。

标签:命令   级别   配置   密码   设置
相关文章
留言与评论(共有 0 条评论)
   
验证码:
推荐文章
排行榜
Copyright ©2019-2022 Comsenz Inc.Powered by © 专利检索| 网站地图