H3C S3100-52P Manuale utente

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Table of Contents

Table of Contents

Chapter 1 CLI Configuration ........................................................................................................1-1

1.1 Introduction to the CLI .......................................................................................................1-1

1.2 Command Hierarchy..........................................................................................................1-2

1.2.1 Command Level and User Privilege Level..............................................................1-2

1.2.2 Modifying the Command Level................................................................................1-3

1.2.3 Switching User Level...............................................................................................1-4

1.3 CLI Views...........................................................................................................................1-8

1.4 CLI Features....................................................................................................................1-12

1.4.1 Online Help............................................................................................................1-12

1.4.2 Terminal Display....................................................................................................1-13

1.4.3 Command History..................................................................................................1-14

1.4.4 Error Prompts........................................................................................................1-15

1.4.5 Command Edit.......................................................................................................1-15

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-1

Chapter 1 CLI Configuration

When configuring CLI, go to these sections for information you are interested in:

zIntroduction to the CLI

zCommand Hierarchy

zCLI Views

zCLI Features

Note:

zSpecifying the authentication mode for user level switching is a new feature in this

manual. For detailed description, see Specifying the authentication mode for user

level switching.

zSpecifying HWTACACS authentication for user level switching is a new feature in

this manual. For detailed description, see section Adopting HWTACACS

authentication for user level switching.

1.1 Introduction to the CLI

Acommand line interface (CLI) is a user interface to interact with a switch. Through the

CLI on a switch, a user can enter commands to configure the switch and check output

information to verify the configuration. Each S3100-52P Ethernet switch provides an

easy-to-use CLI and a set of configuration commands for the convenience of the user

to configure and manage the switch.

The CLI on S3100-52P Ethernet switches provides the following features, and so has

good manageability and operability.

zHierarchical command protection: After users of different levels log in, they can

only use commands at their own, or lower, levels. This prevents users from using

unauthorized commands to configure switches.

zOnline help: Users can gain online help at any time by entering a question mark

(?).

zDebugging: Abundant and detailed debugging information is provided to help

users diagnose and locate network problems.

zCommand history function: This enables users to check the commands that they

have lately executed and re-execute the commands.

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-2

zPartial matching of commands: The system will use partially matching method to

search for commands. This allows users to execute a command by entering

partially-spelled command keywords as long as the keywords entered can be

uniquely identified by the system.

1.2 Command Hierarchy

1.2.1 Command Level and User Privilege Level

I. Command level

The S3100-52P Ethernet switches use hierarchical command protection for command

lines, so as to inhibit users at lower levels from using higher-level commands to

configure the switches.

Based on user privilege, commands are classified into four levels, which default to:

zVisit level (level 0): Commands at this level are mainly used to diagnose network,

and they cannot be saved in configuration file. For example, ping, tracert and

telnet are level 0 commands.

zMonitor level (level 1): Commands at this level are mainly used to maintain the

system and diagnoseservice faults, and they cannot be saved in configuration file.

Such commands include debugging and terminal.

zSystem level (level 2): Commands at this level are mainly used to configure

services. Commands concerning routing and network layers are at this level.

These commands can be used to provide network services directly.

zManage level (level 3): Commands at this level are associated with the basic

operation modules and support modules of the system. These commands provide

support for services. Commands concerning file system, FTP/TFTP/XModem

downloading, user management, and level setting are at this level.

II. User privilege level

Users logged into the switch fall into four user privilege levels, which correspond to the

four command levels respectively. Users at a specific level can only use the commands

at the same level or lower levels.

By default, the Console user (a user who logs into the switch through the Console port)

is a level-3 user, and Telnet users are level-0 users.

You can use the user privilege level command to set the default user privilege level for

users logging in through a certain user interface. For details, refer to Login Operation.

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-3

Note:

If a user logs in using AAA authentication, the user privilege level depends on the

configuration of the AAA scheme. For details, refer to AAA Operation.

1.2.2 Modifying the Command Level

I. Modifying the command level

Commands fall into four levels: visit (level 0), monitor (level 1), system (level 2), and

manage (level 3). By using the following command, the administrator can change the

level of a command in a specific view as required.

Follow these steps to set the level of a command in a specific view:

To do… Use the command… Remarks

Enter system view system-view —

Configure the level of a

command in a specific view command-privilege level level

view view command Required

Caution:

zIt is recommended not to change the level of a command arbitrarily, for it may cause

inconvenience to maintenance and operation.

zWhen you change the level of a command with multiple keywords, you should input

the keywords one by one in the order they appear in the command syntax.

Otherwise, your configuration will not take effect.

II. Configuration example

The network administrator (a level 3 user) wants to change some TFTP commands

(such as tftp get) from level 3 to level 0, so that general Telnet users (level 0 users) are

able to download files through TFTP.

# Change the tftp get command in user view (shell) from level 3 to level 0. (Originally,

only level 3 users can change the level of a command.)

<Sysname> system-view

[Sysname] command-privilege level 0 view shell tftp

[Sysname] command-privilege level 0 view shell tftp 192.168.0.1

[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-4

[Sysname] command-privilege level 0 view shell tftp 192.168.0.1 get

bootrom.btm

After the above configuration, general Telnet users can use the tftp get command to

download file bootrom.btm and other files from TFTP server 192.168.0.1 and other

TFTP servers.

1.2.3 Switching User Level

Complete the following tasks to configure user level switching:

Task Remarks

Specifying the authentication mode for user level switching Optional

Adopting super password authentication for user level switching Required

Adopting HWTACACS authentication for user level switching Required

Switching to a specific user level Required

I. Specifying the authentication mode for user level switching

You can switch between user levels through corresponding commands after logging

into a switch successfully. The high-to-low user level switching is unlimited. However,

the low-to-high user level switching requires the corresponding authentication. The

super password authentication mode and HWTACACS authentication mode are

available at the same time to provide authentication redundancy.

The configuration of authentication mode for user level switching is performed by

Level-3 users.

Follow these steps to specify the authentication mode for user level switching:

To do… Use the command… Remarks

Enter system view system-view —

Enter user interface view user-interface [ type ]

first-number

[ last-number ]—

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-5

To do… Use the command… Remarks

Super password

authentication

super

authentication-mode

super-password

HWTACACS

authentication

super

authentication-mode

scheme

Super password

authentication preferred

(with the HWTACACS

authentication as the

backup authentication

mode)

super

authentication-mode

super-password

scheme

Specify the

authentication

mode for user

level

switching

HWTACACS

authentication preferred

(with the super

password

authentication as the

backup authentication

mode)

super

authentication-mode

scheme

super-password

Optional

By default,

super

password

authentication

is adopted for

user level

switching.

Note:

When both the super password authentication and the HWTACACS authentication are

specified, the device adopts the preferred authentication mode first. If the preferred

authentication mode cannot be implemented (for example, the super password is not

configured or the HWTACACS authentication server is unreachable), the backup

authentication mode is adopted.

II. Adopting super password authentication for user level switching

With the super password set, you can pass the super password authentication

successfully only when you provide the super password as prompted. If no super

password is set, the system prompts “%Password is not set” when you attempt to

switch to a higher user level. In this case, you cannot pass the super password

authentication.

The following table lists the operations to configure super password authentication for

user level switching, which can only be performed by level-3 users.

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-6

Follow these steps to set a password for use level switching:

To do… Use the command… Remarks

Enter system view system-view —

Set the super password

for user level switching

super password [level

level ] { cipher |simple }

password

Required

By default, the super

password is not set.

III. Adopting HWTACACS authentication for user level switching

To implement HWTACACS authentication for user level switching, a level-3 user must

perform the commands listed in the following table to configure the HWTACACS

authentication scheme used for low-to-high user level switching. With HWTACACS

authentication enabled, you canpass the HWTACACS authentication successfully only

after you provide the right user name and the corresponding password as prompted.

Note that if you have passed the HWTACACS authentication when logging in to the

switch, only the password is required.

The following table lists the operations to configure HWTACACS authentication for user

level switching, which can only be performed by Level-3 users.

Follow these steps to set the HWTACACS authentication scheme for user level

switching:

To do… Use the command… Remarks

Enter system view system-view —

Enter ISP domain view domain domain-name —

Set the HWTACACS

authentication scheme

for user level switching

authentication super

hwtacacs-scheme

hwtacacs-scheme-name

Required

By default, the HWTACACS

authentication scheme for user

level switching is not set.

Note:

When setting the HWTACACS authentication scheme for user level switching using the

authentication super hwtacacs-scheme command, make sure the HWTACACS

authentication scheme identified by the hwtacacs-scheme-name argument already

exists. Refer to AAA Operation for information about HWTACACS authentication

scheme.

IV. Switching to a specific user level

Follow these steps to switch to a specific user level:

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-7

To do… Use the

command… Remarks

Switch to a specified user

level super [ level ] Required

Execute this command in user view.

Note:

zIf no user level is specified in the super password command or the super

command, level 3 is used by default.

zFor security purpose, the password entered is not displayed when you switch to

another user level. You will remain at the original user level if you have tried three

times but failed to enter the correct authentication information.

V. Configuration examples

After a general user telnets to the switch, his/her user level is 0. Now, the network

administrator wants to allow general users to switch to level 3, so that they are able to

configure the switch.

1) Super password authentication configuration example

# A level 3 user sets a switching password for user level 3.

<Sysname> system-view

[Sysname] super password level 3 simple 123

# Ageneral user telnets to the switch, and then uses the set password to switch to user

level 3.

<Sysname> super 3

Password:

User privilege level is 3, and only those commands can be used

whose level is equal or less than this.

Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

# After configuring the switch, the general user switches back to user level 0.

<Sysname> super 0

User privilege level is 0, and only those commands can be used

whose level is equal or less than this.

Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

2) HWTACACS authentication configuration example

# Configure a HWTACACS authentication scheme named acs, and specify the user

name and password used for user level switching on the HWTACACS server defined in

the scheme. Refer to AAA Operation for detailed configuration procedures.

# Enable HWTACACS authentication for VTY 0 user level switching.

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-8

<Sysname> system-view

[Sysname] user-interface vty 0

[Sysname-ui-vty0] super authentication-mode scheme

[Sysname-ui-vty0] quit

# Specify to adopt the HWTACACS authentication scheme named acs for user level

switching in the ISP domain named system.

[Sysname] domain system

[Sysname-isp-system] authentication super hwtacacs-scheme acs

# Switch to user level 3 (assuming that you log into the switch as a VTY 0 user by

Telnet).

<Sysname> super 3

Username: user@system

Password:

User privilege level is 3, and only those commands can be used

whose level is equal or less than this.

Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

1.3 CLI Views

CLI views are designed for different configuration tasks. They are both correlated and

distinguishing. For example, once a user logs into a switch successfully, the user enters

user view, where the user can perform some simple operations such as checking the

operation status and statistics information of the switch. After executing the

system-view command, the user enters system view, where the user can go to other

views by entering corresponding commands.

Table 1-1 lists the CLI views provided by S3100-52P Ethernet switches, operations that

can be performed in different CLI views and the commands used to enter specific CLI

views.

Table 1-1 CLI views

View Available

operation Prompt

example Enter method Quit method

User view

Display

operation

status and

statistical

information of

the switch

Enter user

view once

logging into

the switch.

Execute the

quit command

to log out of

the switch.

System view Configure

system

parameters [Sysname]

Execute the

system-view

command in

user view.

Execute the

quit or return

command to

return to user

view.

Operation Manual – CLI

H3C S3100-52P Ethernet Switch Chapter 1 CLI Configuration

1-9

View Available

operation Prompt

example Enter method Quit method

100 Mbps

Ethernet port

view:

[Sysname-Eth

ernet1/0/1]

Execute the

interface

ethernet

command in

system view.

Ethernet port

view

Configure

Ethernet port

parameters 1000 Mbps

Ethernet port

view:

[Sysname-Gig

abitEthernet1/

1/1]

Execute the

interface

gigabitethern

et command

in system

view.

Aux1/0/0 port

(the console

port) view

The

S3100-52P

switches do

not support

configuration

on port

Aux1/0/0

[Sysname-Au

x1/0/0]

Execute the

interface aux

1/0/0

command in

system view

VLAN view Configure

VLAN

parameters

[Sysname-vla

n1]

Execute the

vlan

command in

system view.

VLAN

interface view

Configure

VLAN

interface

parameters,

including the

management

VLAN

parameters

[Sysname-Vla

n-interface1]

Execute the

interface

Vlan-interfac

ecommand in

system view.

Loopback

interface view

Configure

loopback

interface

parameters

[Sysname-Loo

pBack0]

Execute the

interface

loopback

command in

system view.

NULL

interface view

Configure

NULL

interface

parameters

[Sysname-NU

LL0]

Execute the

interface null

command in

system view.

Local user

view

Configure

local user

parameters

[Sysname-lus

er-user1]

Execute the

local-user

command in

system view.

User interface

view

Configure

user interface

parameters

[Sysname-ui-a

ux0]

Execute the

user-interfac

ecommand in

system view.

Execute the

quit command

to return to

system view.

Execute the

return

command to

return to user

view.

Altri manuali per S3100-52P

Indice

Altri manuali H3C Router di rete

H3C

H3C H3C S5600 Series Manuale utente

H3C

H3C SR6602 Manuale utente

H3C

H3C S3610 Series Istruzioni per l'installazione

H3C

H3C RA5100 Manuale utente

H3C

H3C CR16000-F Manuale utente

H3C

H3C SR6600 SPE-FWM Manuale di installazione

H3C

H3C H3C S3600 Series Manuale utente

H3C

H3C SecPath M9000-S NSQM2MPUD0 Manuale utente

H3C

H3C MSR 20-20 Manuale utente

H3C

H3C MSR830 Series Manuale utente

H3C

H3C MSR600 Series Manuale utente

H3C

H3C S5500-SI Series Manuale utente

H3C

H3C S5560-EI series Manuale utente

H3C

H3C S3100-52P Manuale utente

H3C

H3C MSR 5600 Manuale di installazione

H3C

H3C S3100-52P Manuale utente

H3C

H3C MSR Series Manuale utente

H3C

H3C AR 18-22-24 Manuale utente

H3C

H3C S5500-EI series Manuale utente

H3C

H3C H3C S7500E Series Manuale utente

H3C

H3C S5830V2 series Manuale utente

H3C

H3C SecPath F5010 Manuale operativo e di manutenzione

H3C

H3C S9500 Series Manuale utente

H3C

H3C S9500 Series Istruzioni per l'installazione

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza