3Com Switch 8800 Advanced Software V5 Configuration Guide
48 CHAPTER 4: USER INTERFACE CONFIGURATION
Follow these steps to configure the user privilege level under a user interface:
Configuring Access
Restriction on VTY
User Interface(s)
You can configure access restriction on the VTY user interface through referencing
an ACL. For details regarding ACL, refer to
“ACL Overview” on page 801.
Follow these steps to configure access restriction on VTY user interfaces:
Configuring
Supported Protocols
on VTY User
Interface(s)
Currently, only the VTY user interface allows configuration on the supported
protocols.
Follow these steps to configure supported protocols on the active VTY user
interface:
c
CAUTION:
■ If SSH is configured, you must set the authentication mode to scheme using
the authentication-mode scheme command to guarantee a successful login.
To do... Use the command... Remarks
Enter system view system-view --
Enter user interface view user-interface { first-num1 [
last-num1 ] | { aux | console |
vty } first-num2 [ last-num2 ] }
--
Configure user’s privilege
level under the current user
interface
user privilege level level Optional
By default, users logging in
from Console port have a
privilege level of 3; users
logging in from other user
interfaces have a privilege
level of 0.
To do... Use the command... Remarks
Enter system view system-view --
Enter VTY user interface view user-interface { first-num1 [
last-num1 ] | vty first-num2 [
last-num2 ] }
--
Configure the
access
restriction on
the VTY user
interface
By referencing
basic/advance
d ACL
acl [ ipv6 ] acl-number {
inbound | outbound }
Use either command
No restriction is set by
default.
By referencing
Layer 2 ACL
acl acl-number inbound
To do... Use the command... Remarks
Enter system view system-view --
Enter VTY user interface view user-interface { first-num1 [
last-num1 ] | vty first-num2 [
last-num2 ] }
--
Configure the supported
protocol(s) on the active user
interface
protocol inbound { all | ssh |
telnet }
Optional
Both Telnet and SSH are
supported by default.