华为S3352三层交换机super密码和新加用户的设置
设备:华为S3352
软件版本:VRP (R) Software, Version 5.30 (S3352
V100R003C00SPC301)
本实验非常简单,只是对华为设备不熟所以写出来。
欢迎微博交流: http://t.sina.com.cn/epkings
1、super密码:
其实就是相当于cisco中的enable密码。
命令格式:[S3352]super password level 3 ciper huawei
其中的3是3级权限,ciper表示密码是密文表示(不建议使用simple明文显示),huawei就
是密码啦。
2、新加用户:
[S3352]aaa
[S3352-aaa]local-user admin level 1 password cipher huawei
这样就可以新加一个用户名为admin密码为huawei的帐号,此用户为1级,如果用户为3级
,那么登设备的时候就无需输入super密码。
此外还可以加一些用户的服务设置:
[S3352-aaa]local-user admin service-type ?
8021x 802.1x user
bind Bind authentication user
ftp FTP user
http HTTP user
ppp PPP user
ssh SSH user
telnet Telnet user
terminal Teminal user
web Web authentication user
x25-pad X25-pad user
3、效果:
super密码演示:
<router>telnet 1.1.1.1 //1.1.1.1为S3352的管理IP地址
Trying 1.1.1.1 ...
Press CTRL+K to abort
Connected to 1.1.1.1 ...
Login authentication
Username:admin
Password:
Note: The max number of VTY users is 5, and the current number
of VTY users on line is 1.
<S3352>sys //1级用户admin不能直接进入sys模式
^
Error:Unrecognized command found at '^' position.
<S3352>su //通过super密码提升用户等级为3级
Password:
Now user privilege is 3 level, and only those commands whose level is
equal to or less than this level can be used.
Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
<S3352>sys
Enter system view, return user view with Ctrl+Z.
[S3352]
[S3352]dis cu(部分内容)
#
super password level 3 cipher .NC`O01J-QU./a!1$H@GYA!!
#
aaa
local-user admin password cipher I*H'$X,B-@M!_KY-G6D741!!
local-user admin level 1
local-user admin ftp-directory flash:
local-user admin service-type telnet
The End...