華為交換機(jī)VTY用戶界面屬性配置教程

《華為交換機(jī)VTY用戶界面屬性配置教程》由會(huì)員分享，可在線閱讀，更多相關(guān)《華為交換機(jī)VTY用戶界面屬性配置教程（7頁珍藏版）》請?jiān)谘b配圖網(wǎng)上搜索。

華為交換機(jī)VTY用戶界面屬性配置教程 用戶通過Telnet或SSH方式登錄設(shè)備實(shí)現(xiàn)本地或遠(yuǎn)程維護(hù)時(shí)，可以根據(jù)用戶使用需求以及對設(shè)備安全的考慮來配置VTY， 除對VTY類型用戶界面呼入呼出進(jìn)行限制的ACL號(hào)、用戶名和口令及用戶界面的驗(yàn)證方式外其他參數(shù)設(shè)備均有缺省值，用戶可以結(jié)合實(shí)際需求和安全性考慮選擇配置。 1、設(shè)置通過賬號(hào)和密碼登陸VTY界面 1.1、進(jìn)入VTY用戶界面視圖 [Huawei]user-interface vty ? INTEGER<0-4,16-20> The first user terminal interface to be configured [Huawei]user-interface vty 0 4 [Huawei-ui-vty0-4] 1.2、設(shè)置用戶驗(yàn)證方式為AAA驗(yàn)證（即通過賬號(hào)和密碼登陸） [Huawei-ui-vty0-4]authentication-mode ? aaa AAA authentication none Login without checking password Authentication through the password of a user terminal interface [Huawei-ui-vty0-4]authentication-mode aaa 1.3、設(shè)置登陸的賬號(hào)和密碼 [Huawei-ui-vty0-4]q [Huawei]aaa [Huawei-aaa]local-user ? STRING<1-64> User name, in form of user@domain. Can use wildcard *, while displaying and modifying, such as *@isp,user@*,*@*.Can not include invalid character / \ : * ? " < > | @ [Huawei-aaa]local-user 023wg.com ? access-limit Set access limit of user(s) ftp-directory Set user(s) FTP directory permitted idle-timeout Set the timeout period for terminal user(s) password Set password privilege Set admin user(s) level service-type Service types for authorized user(s) state Activate/Block the user(s) user-group User group [Huawei-aaa]local-user 023wg.com password ? cipher User password with cipher text [Huawei-aaa]local-user 023wg.com password cipher www.023wg.com 1.4、設(shè)置賬號(hào)的使用類型為Telnet或SSH [Huawei-aaa]local-user 023wg.com service-type telnet 或 [Huawei-aaa]local-user 023wg.com service-type ssh 2、設(shè)置只通過密碼登陸VTY 2.1、置用戶驗(yàn)證方式為密碼驗(yàn)證 [Huawei-ui-vty0-4]authentication-mode password 2.2、設(shè)置登陸密碼 [Huawei-ui-vty0-4]set authentication password cipher ? STRING<1-16>/<24> Plain text/cipher text password [Huawei-ui-vty0-4]set authentication password cipher www.023wg.com 3、設(shè)置直接登陸VTY（此模式不安全） [Huawei-ui-vty0-4]authentication-mode none 4、配置VTY用戶界面的用戶優(yōu)先級 缺省情況下，VTY用戶界面對應(yīng)的默認(rèn)命令訪問級別是0，實(shí)際工作如果對權(quán)限要求不是特別嚴(yán)格，一本設(shè)置為15級。 [Huawei-ui-vty0-4]user privilege level ? INTEGER<0-15> Set a priority [Huawei-ui-vty0-4]user privilege level 15 5、啟用VTY終端服務(wù) [Huawei-ui-vty0-4]shell 6、設(shè)置用戶超時(shí)斷連時(shí)間 [Huawei-ui-vty0-4]idle-timeout ? INTEGER<0-35791> Set the number of minutes before a terminal user times out(default: 10minutes) 7、設(shè)置終端屏幕每屏顯示的行數(shù) [Huawei-ui-vty0-4]screen-length ? INTEGER<0-512> Display the number of lines on a screen (the value 0 indicates none split screen, and the default value is 24) 8、設(shè)置終端屏幕顯示的列數(shù) [Huawei-ui-vty0-4]screen-width ? INTEGER<60-512> Screen width value, the default is 80 9、設(shè)置歷史命令緩存條數(shù) [Huawei-ui-vty0-4]history-command ? max-size Set the size of the maximum history buffer, the default value is 10 [Huawei-ui-console0]history-command max-size ? INTEGER<0-256> The size of a history buffer 10、VTY用戶界面支持的登陸協(xié)議 [Huawei-ui-vty0-4]protocol inbound ? all All protocols ssh SSH protocol telnet Telnet protocol 11、配置VTY用戶界面的最大個(gè)數(shù) VTY用戶界面最大個(gè)數(shù)是指登錄設(shè)備的Telnet用戶和SSH用戶的總和。 當(dāng)配置VTY用戶界面最大個(gè)數(shù)為0時(shí)，任何用戶（包括網(wǎng)管用戶）都無法通過VTY登錄到設(shè)備。 如果要配置的VTY類型用戶界面的最大個(gè)數(shù)小于當(dāng)前在線用戶的數(shù)量，則系統(tǒng)提示配置失敗。如果要配置的VTY類型用戶界面的最大個(gè)數(shù)大于當(dāng)前最多可以登錄用戶的數(shù)量，就必須為新增加的用戶界面配置驗(yàn)證方式。 [Huawei]user-interface maximum-vty ? INTEGER<0-15> The maximum number of VTY users, the default value is 5 12、配置VTY用戶界面的基于ACL的登錄限制 [Huawei-ui-vty0-4]acl ? INTEGER<2000-3999> Apply basic or advanced ACL ipv6 Filter IPv6 addresses [Huawei-ui-vty0-4]acl 2000 ? inbound Filter login connections from the current user interface outbound Filter logout connections from the current user interface 13、查看VTY用戶界面信息 [Huawei]display user-interface vty 0 4 Idx Type Tx/Rx Modem Privi ActualPrivi Auth Int 38 VTY 4 - 15 - N - + : Current UI is active. F : Current UI is active and work in async mode. Idx : Absolute index of UIs. Type : Type and relative index of UIs. Privi: The privilege of UIs. ActualPrivi: The actual privilege of user-interface. Auth : The authentication mode of UIs. A: Authenticate use AAA. N: Current UI need not authentication. P: Authenticate use current UIs password. Int : The physical location of UIs. 14、查看VTY類型用戶界面的最大個(gè)數(shù) [Huawei]display user-interface maximum-vty Maximum of VTY user:15