《华为交换机VTY用户界面属性配置教程》由会员分享，可在线阅读，更多相关《华为交换机VTY用户界面属性配置教程（8页珍藏版）》请在金锄头文库上搜索。
1、华为交换机VTY用户界面属性配置教程用户通过Telnet或SSH方式登录设备实现本地或远程维护时，可以根据用 户使用需求以及对设备安全的考虑来配置VTY，除对VTY类型用户界面呼入呼 出进行限制的ACL号、用户名和口令及用户界面的验证方式外其他参数设备均 有缺省值，用户可以结合实际需求和安全性考虑选择配置。1,设通过账号和密码登陆VTY界面1.1、进入VTY用户界面视图Huaweiuser-interface vty ?INTEGER The first user terminal interface to be configuredHuaweiuser-interface vty 0 4Hu
2、awei-ui-vty0-41.2、设置用户验证方式为AAA验证（即通过账号和密码登陆） Huawei-ui-vty0-4authentication-mode ?aaa AAA authenticationnone Login without checkingpassword Authentication through the password of a user terminal interfaceHuawei-ui-vty0-4authentication-mode aaa1.3、设置登陆的账号和密码Huawei-ui-vty0-4qHuaweiaaaHuawei-aaalocal-u
3、ser ?STRING User name, in form of userdomain. Can use wildcard *,while displaying and modifying, such as*isp,user*,*.Cannot include invalid character / : * ? | Huawei-aaalocal-user ?access-limit Set access limit of user(s) ftp-directory Set user(s) FTP directory permittedidle-timeout Set the timeou
4、t period for terminal user(s)password Set passwordprivilege Set admin user(s) levelservice-type Service types for authorized user(s)state Activate/Block the user(s)user-group User groupcipher User password with cipher textHuawei-aaalocal-user password cipher 1.4、设置账号的使用类型为Telnet或SSHHuawei-aaalocal-
5、user service-type telnet或Huawei-aaalocal-user service-type ssh2,设只通过密码登陆VTY2.1、置用户验证方式为密码验证Huawei-ui-vty0-4authentication-mode password2.2、设置登陆密码Huawei-ui-vty0-4set authentication password cipher ?STRING/ Plain text/cipher text passwordHuawei-ui-vty0-4set authentication password cipher 3,设置直接登陆VTY
6、 （此模式不安全）Huawei-ui-vty0-4authentication-mode none4配置VTY用户界面的用户优先级缺省情况下，VTY用户界面对应的默认命令访问级别是0，实际工作如果对权限要求不是特别严格，一本设置为15级。Huawei-ui-vty0-4user privilege level ?INTEGER Set a priorityHuawei-ui-vty0-4user privilege level 155, 启用VTY终端服务Huawei-ui-vty0-4shell6, 设用户超时断连时间Huawei-ui-vty0-4idle-timeout ?INTEGER
7、 Set the number of minutes before a terminal usertimes out(default: 10minutes)7, 设置终端1鼻幕每屏显示的行Huawei-ui-vty0-4screen-lengthINTEGER Display the number of lines on a screen (the value 0 indicates none split screen, and the default value is 24)8, 设终端屏幕显示的列【HuawerurviyoAscreenw-dih 7INTEGERA60512V Scree
8、n w-dr-l-h va-up-he defau-i -s 809, ssssss【Huaweru-MyoAh-siorycommand 7maxs-ze Seiihe s-ze of -he max-mum h-siory buffer、-he defau-i va-ue 一 s 1。【HuaweT,uT,conso-eozs1:orycommand maxs-ze 2INTEGERA0256V The s-ze of a h-siory buffer10, VTYaBgBI学smRHm【HuaweT,uT,viyo4Jpro1:oco-nbound 7a= = proioco-sssh
9、SSH proioco-ie-nei Te-nei proioco-VTY 0-0- S3 SSH 丑宅SM苫。 VTY 。枝、(直薜囱w丑宅) aaVTY 暖留蓄。如果要配置的VTY类型用户界面的最大个数小于当前在线用户的数量，则系统 提示配置失败。如果要配置的VTY类型用户界面的最大个数大于当前最多可以 登录用户的数量，就必须为新增加的用户界面配置验证方式。Huaweiuser-interface maximum-vty ?INTEGER The maximum number of VTY users, the default value is 512、配置VTY用户界面的基于ACL的登录
10、限制Huawei-ui-vty0-4acl ?INTEGER Apply basic or advanced ACLipv6Filter IPv6 addressesHuawei-ui-vty0-4acl 2000 ?inbound Filter login connections from the current user interface outbound Filter logout connections from the current user interface13、查看VTY用户界面信息Huaweidisplay user-interface vty 0 4Idx Type T
11、x/Rx Modem Privi ActualPrivi Auth Int38 VTY 4-15- N -+: Current UI is active.F : Current UI is active and work in async mode.Idx : Absolute index of UIs.Type : Type and relative index of UIs.Privi: The privilege of UIs.ActualPrivi: The actual privilege of user-interface.Auth : The authentication mode of UIs.A: Authenticate use AAA.N: Current UI need not authentication.P: Authenticate use current UIs password.Int : The physical location of UIs.14查看VTY类型用户界面的最大中Huaweidisplay user-interface maximum-vtyMaximum of VTY user:15
