華為交換機(jī)VTY用戶(hù)界面屬性配置教程用戶(hù)通過(guò)Telnet或SSH方式登錄設(shè)備實(shí)現(xiàn)本地或遠(yuǎn)程維護(hù)時(shí)，可以根據(jù)用戶(hù)使用需求以及對(duì)設(shè)備安全的考慮來(lái)配置VTY，除對(duì)VTY類(lèi)型用戶(hù)界面呼入呼出進(jìn)行限制的ACL號(hào)、用戶(hù)名和口令及用戶(hù)界面的驗(yàn)證方式外其他參數(shù)設(shè)備均有缺省值，用戶(hù)可以結(jié)合實(shí)際需求和安全性考慮選擇配置。1、設(shè)置通過(guò)賬號(hào)和密碼登陸VTY界面1.1、進(jìn)入VTY用戶(hù)界面視圖[Huawei]user-interfacevty?

INTEGER<0-4,16-20>

Thefirstuserterminalinterfacetobeconfigured

[Huawei]user-interfacevty04[Huawei-ui-vty0-4]

1.2、設(shè)置用戶(hù)驗(yàn)證方式為AAA驗(yàn)證（即通過(guò)賬號(hào)和密碼登陸）[Huawei-ui-vty0-4]authentication-mode?

aaa

AAAauthentication

none

Loginwithoutchecking

password

Authenticationthroughthepasswordofauserterminalinterface

[Huawei-ui-vty0-4]authentication-modeaaa

1.3、設(shè)置登陸的賬號(hào)和密碼[Huawei-ui-vty0-4]q[Huawei]aaa[Huawei-aaa]local-user?

STRING<1-64>

Username,informof'user@domain'.Canusewildcard'*',

whiledisplayingandmodifying,suchas*@isp,user@*,*@*.Can

notincludeinvalidcharacter/\:*?"<>|@'

[Huawei-aaa]local-user023?

access-limit

Setaccesslimitofuser(s)

ftp-directory

Setuser(s)FTPdirectorypermitted

idle-timeout

Setthetimeoutperiodforterminaluser(s)

password

Setpassword

privilege

Setadminuser(s)level

service-type

Servicetypesforauthorizeduser(s)

state

Activate/Blocktheuser(s)

user-group

Usergroup

[Huawei-aaa]local-user023password?[Huawei-ui-vty0-4]screen-width?

INTEGER<60-512>

Screenwidthvalue,thedefaultis80

9、設(shè)置歷史命令緩存條數(shù)[Huawei-ui-vty0-4]history-command?

max-size

Setthesizeofthemaximumhistorybuffer,thedefaultvalueis10

[Huawei-ui-console0]history-commandmax-size?

INTEGER<0-256>

Thesizeofahistorybuffer

10、VTY用戶(hù)界面支持的登陸協(xié)議[Huawei-ui-vty0-4]protocolinbound?

all

Allprotocols

ssh

SSHprotocol

telnet

Telnetprotocol11、配置VTY用戶(hù)界面的最大個(gè)數(shù)VTY用戶(hù)界面最大個(gè)數(shù)是指登錄設(shè)備的Telnet用戶(hù)和SSH用戶(hù)的總和。當(dāng)配置VTY用戶(hù)界面最大個(gè)數(shù)為0時(shí)，任何用戶(hù)（包括網(wǎng)管用戶(hù)）都無(wú)法通過(guò)VTY登錄到設(shè)備。如果要配置的VTY類(lèi)型用戶(hù)界面的最大個(gè)數(shù)小于當(dāng)前在線用戶(hù)的數(shù)量，則系統(tǒng)提示配置失敗。如果要配置的VTY類(lèi)型用戶(hù)界面的最大個(gè)數(shù)大于當(dāng)前最多可以登錄用戶(hù)的數(shù)量，就必須為新增加的用戶(hù)界面配置驗(yàn)證方式。[Huawei]user-interfacemaximum-vty?

INTEGER<0-15>

ThemaximumnumberofVTYusers,thedefaultvalueis5

12、配置VTY用戶(hù)界面的基于ACL的登錄限制[Huawei-ui-vty0-4]acl?

INTEGER<2000-3999>

ApplybasicoradvancedACL

ipv6

FilterIPv6addresses

[Huawei-ui-vty0-4]acl2000?

inbound

Filterloginconnectionsfromthecurrentuserinterface

outbound

Filterlogoutconnectionsfromthecurrentuserinterface

13、查看VTY用戶(hù)界面信息[Huawei]displayuser-interface

vty

04

Idx

Type

Tx/Rx

ModemPriviActualPriviAuth

Int

38

VTY4

-

15

-

N

-

+

:CurrentUIisactive.

F

:CurrentUIisactiveandworkinasyncmode.

Idx

:AbsoluteindexofUIs.

Type:TypeandrelativeindexofUIs.

Privi:TheprivilegeofUIs.

ActualPrivi:Theactualprivilegeofuser-interface.

Auth:TheauthenticationmodeofUIs.

A:AuthenticateuseAAA.

N:CurrentUIneednotauthentication.

P:Authenticate