H3C Technologies H3C S3600 Series Switches - Manual (Page 23)

1-7
Authentication
method
Description
Application
scenarios
Configuration
Username and
password
z Complex to configure
z Allows users inputting the correct
username and password to telnet
to your switch
z Most secure, and capable of
assigning different privilege levels
to different users
Environments where
multiple operators
cooperate to manage
the device
An H3C switch provides multiple VTY user interfaces. At one time, only one user can telnet to a VTY
user interface. Because a remote terminal cannot select the VTY user interface through which it logs in
to the switch, it is recommended that you configure all VTY user interfaces with the same authentication
method. The following example is configured in this way.
The number of VTY user interfaces provided by a H3C device varies by switch model. In this document,
a switch providing five VTY user interfaces is used as an example, which means that the VTY user
interface number ranges from 0 to 4. If your switch provides a different number of VTY user interfaces,
make sure that the VTY interface number you configure is within the actual range.
Telnet login configuration example
# Enter system view.
system-view
# Enable the telnet service.
[Sysname] telnet server enable
# Create VLAN-interface 1.
[Sysname] interface vlan-interface 1
# Assign an IP address to VLAN-interface 1 according to the IP network segment distribution and usage
in the current network. 192.168.0.72 is used as an example.
[Sysname-Vlan-interface1] ip address 192.168.0.72 24
[Sysname-Vlan-interface1] quit
# Enter the view of VTY user interfaces 0 through 4.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4]
# Configure the authentication method for the VTY user interfaces as needed.
Omitted. For more information, see Login Configuration.
# Configure the command level available to the users that log in through VTY user interfaces 0 through
4. Command level 3 is used as an example, which means that the users can use all commands.