實(shí)驗(yàn)二：華三Telent登錄

1、實(shí)驗(yàn)二：Telnet登錄交換機(jī)一、 理論基礎(chǔ)Telnet管理方法是網(wǎng)絡(luò)工程師或網(wǎng)絡(luò)管理員最常用的設(shè)備訪問(wèn)方法.它通過(guò)局域網(wǎng)或者廣域網(wǎng)實(shí)現(xiàn)本地或者遠(yuǎn)程的訪問(wèn)控制.但是它的使用必須要求首先對(duì)設(shè)備進(jìn)行初始化配置,否則用戶無(wú)法正確登錄和訪問(wèn).要想訪問(wèn)某交換機(jī),必須能夠唯一確定被訪問(wèn)的交換機(jī).在網(wǎng)絡(luò)中都使用IP地址進(jìn)行標(biāo)識(shí),所以我們使用Telnet進(jìn)行登錄時(shí),前提是交換機(jī)必須有一個(gè)唯一的地址,即管理地址.二、 實(shí)驗(yàn)案例Telnet登錄的配置1、實(shí)驗(yàn)拓?fù)浣Y(jié)構(gòu)圖： 2、配置說(shuō)明：交換機(jī)的管理IP是: 192.168.10.100 子網(wǎng)掩碼是: 255.255.255.03、具體配置：沒(méi)有設(shè)置認(rèn)證的情況下：Q

2、uidwayint vlan 1Quidway-Vlan-interface1%Apr 2 00:03:23 2000 Quidway L2INF/5/VLANIF LINK STATUS CHANGE: Vlan-interface1: turns into UP stateQuidway-Vlan-interface1ip address 192.168.10.100 255.255.255.0Quidway-Vlan-interface1%Apr 2 00:03:56 2000 Quidway IFNET/5/UPDOWN:Line protocol on the interface V

3、lan-interface1 turns into UP stateQuidway-Vlan-interface1quitQuidwaydis cursysname Quidwayradius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domaindomain system radius-scheme system access-limit disable state activ

4、e vlan-assignment-mode integer idle-cut disable self-service-url disable messenger time disable domain default enable systemlocal-server nas-ip 127.0.0.1 key huaweiqueue-scheduler wrr 1 2 4 8vlan 1interface Vlan-interface1 ip address 192.168.10.100 255.255.255.0interface Aux0/0interface Ethernet0/1i

5、nterface Ethernet0/2interface Ethernet0/3interface Ethernet0/4interface Ethernet0/5interface Ethernet0/6interface Ethernet0/7interface Ethernet0/8interface NULL0user-interface aux 0user-interface vty 0 4Return顯示結(jié)果圖：僅設(shè)置口令認(rèn)證的情況：Quidwayuser-interface vty 0 4Quidway-ui-vty0-4authentication-mode ? none L

6、ogin without checking password Authentication use password of user terminal interface scheme Authentication use RADIUS schemeQuidway-ui-vty0-4authentication-mode passwordQuidway-ui-vty0-4set authentication password simple djwQuidwaysuper password level 1 simple djw1Quidwaysuper password level 2 simp

7、le djw2Quidwaysuper password level 3 simple djw3Quidwaydis cursysname Quidwaysuper password level 1 simple djw1 super password level 2 simple djw2 super password level 3 simple djw3radius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-na

8、me-format without-domaindomain system radius-scheme system access-limit disable state active vlan-assignment-mode integer idle-cut disable self-service-url disable messenger time disable domain default enable systemlocal-server nas-ip 127.0.0.1 key huaweiqueue-scheduler wrr 1 2 4 8vlan 1interface Vl

9、an-interface1 ip address 192.168.10.100 255.255.255.0interface Aux0/0interface Ethernet0/1interface Ethernet0/2interface Ethernet0/3interface Ethernet0/4interface Ethernet0/5interface Ethernet0/6interface Ethernet0/7interface Ethernet0/8interface NULL0user-interface aux 0user-interface vty 0 4 set a

10、uthentication password simple djwreturn<Quidway>%Apr 2 00:12:20 2000 Quidway SHELL/5/LOGIN: VTY login from 192.168.10.11%Apr 2 00:13:28 2000 Quidway SHELL/5/LOGOUT: VTY logout from 192.168.10.11顯示結(jié)果圖：用戶登錄前更改缺省的權(quán)限為3級(jí)：Quidwayuser-interface vty 0 4 Quidway-ui-vty0-4user privilege level 3需要口令和用戶名認(rèn)

11、證的情況，同時(shí)更改缺省的權(quán)限級(jí)別：Quidwayuser-interface vty 0 4Quidway-ui-vty0-4authentication-mode scheme Notice: Telnet or SSH user must be added , otherwise operator can't loginQuidwaylocal-user djwNew local user added.Quidway-luser-djwservice-type telnet level 3Quidway-luser-djwpassword simple djw4Quidway-lu

12、ser-djwquitQuidwaydis cursysname Quidwaysuper password level 1 simple djw1 super password level 2 simple djw2 super password level 3 simple djw3radius scheme system server-type huawei primary authentication 127.0.0.1 1645 primary accounting 127.0.0.1 1646 user-name-format without-domaindomain system

13、 radius-scheme system access-limit disable state active vlan-assignment-mode integer idle-cut disable self-service-url disable messenger time disable domain default enable systemlocal-server nas-ip 127.0.0.1 key huaweilocal-user djw password simple djw4 service-type telnet level 3queue-scheduler wrr

14、 1 2 4 8vlan 1interface Vlan-interface1 ip address 192.168.10.100 255.255.255.0interface Aux0/0interface Ethernet0/1interface Ethernet0/2interface Ethernet0/3interface Ethernet0/4interface Ethernet0/5interface Ethernet0/6interface Ethernet0/7interface Ethernet0/8interface NULL0user-interface aux 0user-interface vty 0 4 authentication-mode schemereturn<Quidway>%Apr 2 00:3