3Com 4200G 12-Port User manual

3Com Switch 4200G Family
Configuration Guide
Switch 4200G 12-Port
Switch 4200G 24-Port
Switch 4200G 48-Port
Switch 4200G PWR 24-Port
Product Version: V3.02.00
Manual Version:
6PW100-20081201
www.3com.com
3Com Corporation
350 Campus Drive, Marlborough,
MA, USA 01752 3064

Copyright © 2006-2008, 3Com Corporation. All rights reserved. No part of this documentation may be
reproduced in any form or by any means or used to make any derivative work (such as translation,
transformation, or adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to
time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied
or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability,
satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the
product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hard copy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are
provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense.
Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or
as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are
provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights
only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.
You agree not to remove or deface any portion of any legend provided on any licensed program or
documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com and the 3Com logo are registered trademarks of 3Com Corporation.
All other company and product names may be trademarks of the respective companies with which they are
associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we
are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental
standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.
Environmental Statement about the Documentation
The documentation for thisproduct is printed on paper that comes from sustainable, managed forests; it is fully
biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and the
inks are vegetable-based with a low heavy-metal content.

About This Manual
Organization
3Com Switch 4200G Family Configuration Guide is organized as follows:
Part Contents
1 Login Introduces the ways to log into an Ethernet switch and CLI
related configuration.
2 Configuration File Management Introduces configuration file and the related configuration.
3 VLAN Introduces VLAN-/Voice VLAN-related configuration.
4 Static Routing Introduces the static routing configuration.
5 Voice VLAN Introduces voice VLAN and the related configuration.
6 GVRP Introduces GVRP and the related configuration.
7 Port Basic Configuration Introduces basic port configuration.
8 Link Aggregation Introduces link aggregation and the related configuration.
9 Port Isolation Introduces port isolation and the related configuration.
10 Port Security-Port Binding Introduces port security, port binding, and the related
configuration.
11 MAC Address Table Management Introduces MAC address forwarding table management.
12 MSTP Introduces STP and the related configuration.
13 802.1x and System Guard Introduces 802.1x and the related configuration.
14 AAA Introduces AAA, RADIUS, HWTACACS, EAD, and the
related configurations.
15 MAC Address Authentication Introduces centralized MAC address authentication and the
related configuration.
16 IP Address and Performance
Optimization Introduces IP address and IP performance optimization related configuration
17 ARP Introduces ARP and the related configuration.
18 DHCP Introduces DHCP-Snooping, DHCP Client and the related
configuration.
19 DNS Introduces DNS and the related configuration.
20 ACL Introduces ACL and the related configuration.
21 QoS-QoS Profile Introduces QoS and the related configuration.
22 Mirroring Introduces mirroring and the related configuration.
23 Stack-Cluster Introduces the related configuration for cluster management
by using HGMP V2.
24 SNMP-RMON Introduces the configuration for network management
through SNMP and RMON
25 Multicast Introduces IGMP snooping and the related configuration.
26 NTP Introduces NTP and the related configuration.
27 SSH Introduces SSH2.0 and the related configuration.

Part Contents
28 File System Management Introduces basic configuration for file system management.
29 FTP-SFTP-TFTP Introduces basic configuration for FTP, SFTP and TFTP,
and the applications.
30 Information Center Introduces information center configuration.
31 System Maintenance and
Debugging Introduces daily system maintenance and debugging.
32 Remote-ping Introduces Remote-ping and the related configuration.
33 PoE-PoE Profile Introduces PoE, PoE profile and the related configuration.
34 Smart Link-Monitor Link Introduces Smart Link, Monitor Link and the related
configuration.
35 IPv6 Management Introduces IPv6 and the related configuration.
36 UDP Helper Introduces UDP helper and the related configuration.
37 Access Management Introduces Access Management and the related
configuration.
38 Appendix Lists the acronyms used in this manual
Conventions
The manual uses the following conventions:
Command conventions
Convention Description
Boldface The keywords of a command line are in Boldface.
italic Command arguments are in italic.
[ ] Items (keywords or arguments) in square brackets [ ] are optional.
{ x | y | ... }
Alternative items are grouped in braces and separated by vertical bars.
One is selected.
[ x | y | ... ]
Optional alternative items are grouped in square brackets and
separated by vertical bars. One or none is selected.
{ x | y | ... } *
Alternative items are grouped in braces and separated by vertical bars.
A minimum of one or a maximum of all can be selected.
[ x | y | ... ] *
Optional alternative items are grouped in square brackets and
separated by vertical bars. Many or none can be selected.
&<1-n> The argument(s) before the ampersand (&) sign can be entered 1 to n
times.
# A line starting with the # sign is comments.

GUI conventions
Convention Description
< > Button names are inside angle brackets. For example, click <OK>.
[ ] Window names, menu items, data table and field names are inside
square brackets. For example, pop up the [New User] window.
/ Multi-level menus are separated by forward slashes. For example,
[File/Create/Folder].
Symbols
Convention Description
Means reader be extremely careful. Improper operation may cause
bodily injury.
Means reader be careful. Improper operation may cause data loss or
damage to equipment.
Means a complementary description.
Related Documentation
In addition to this manual, each 3com Switch 4200G documentation set includes the following:
Manual Description
3Com Switch 4200G Family Command
Reference Guide Provide detailed descriptions of command line interface (CLI) commands, that you require to manage your switch.
3Com Switch 4200G Family Quick
Reference Guide
Provide a summary of command line interface (CLI)
commands that are required for you to manage your
Stackable Switch.
3Com Switch 4200G Family Getting
Started Guide This guide provides all the information you need to install and use the 3Com Switch 4200G Family.
3Com Switch 4200G 10G Interface
Module Installation Guide Provide detailed descriptions of the 10G Interface Modules used by 3Com Switch 4200G Family.
3Com Switch 4200G Family Release
Notes
Contain the latest information about your product. If
information in this guide differs from information in the
release notes, use the information in the Release Notes.
Obtaining Documentation
You can access the most up-to-date 3Com product documentation on the World WideWeb at this URL:
http://www.3com.com.

i
Table of Contents
1Logging In to an Ethernet Switch ············································································································1-1
Logging In to an Ethernet Switch············································································································1-1
Introduction to the User Interface············································································································1-1
Supported User Interfaces ··············································································································1-1
Relationship Between a User and a User Interface········································································1-2
User Interface Index························································································································1-2
Common User Interface Configuration····························································································1-2
2Logging In Through the Console Port·····································································································2-1
Introduction ·············································································································································2-1
Setting Up a Login Environment for Login Through the Console Port····················································2-1
Console Port Login Configuration···········································································································2-3
Common Configuration····················································································································2-3
Console Port Login Configurations for Different Authentication Modes ·················································2-5
Console Port Login Configuration with Authentication Mode Being None··············································2-6
Configuration Procedure··················································································································2-6
Configuration Example····················································································································2-6
Console Port Login Configuration with Authentication Mode Being Password ······································2-7
Configuration Procedure··················································································································2-7
Configuration Example····················································································································2-8
Console Port Login Configuration with Authentication Mode Being Scheme·········································2-9
Configuration Procedure··················································································································2-9
Configuration Example··················································································································2-10
3Logging In Through Telnet·······················································································································3-1
Introduction ·············································································································································3-1
1.1.1 Common Configuration to Control Telnet Access··································································3-1
Telnet Configurations for Different Authentication Modes·······························································3-3
Telnet Configuration with Authentication Mode Being None ··································································3-4
Configuration Procedure··················································································································3-4
Configuration Example····················································································································3-4
Telnet Configuration with Authentication Mode Being Password···························································3-5
Configuration Procedure··················································································································3-5
Configuration Example····················································································································3-6
Telnet Configuration with Authentication Mode Being Scheme······························································3-7
Configuration Procedure··················································································································3-7
Configuration Example····················································································································3-8
Telnetting to a Switch······························································································································3-9
Telnetting to a Switch from a Terminal····························································································3-9
Telnetting to another Switch from the Current Switch···································································3-11
4Logging In Using a Modem·······················································································································4-1
Introduction ·············································································································································4-1
Configuration on the Switch Side············································································································4-1
Modem Configuration······················································································································4-1

ii
Switch Configuration························································································································4-2
Modem Connection Establishment·········································································································4-2
5CLI Configuration ······································································································································5-1
Introduction to the CLI·····························································································································5-1
Command Hierarchy·······························································································································5-1
Command Level and User Privilege Level······················································································5-1
Modifying the Command Level········································································································5-2
Switching User Level·······················································································································5-3
CLI Views················································································································································5-7
CLI Features ·········································································································································5-10
Online Help····································································································································5-10
Terminal Display····························································································································5-11
Command History··························································································································5-12
Error Prompts································································································································5-12
Command Edit·······························································································································5-13
6Logging In Through the Web-based Network Management Interface ·················································6-1
Introduction ·············································································································································6-1
Establishing an HTTP Connection··········································································································6-1
Configuring the Login Banner·················································································································6-2
Configuration Procedure··················································································································6-2
Configuration Example····················································································································6-3
Enabling/Disabling the WEB Server ·······································································································6-3
7Logging In Through NMS··························································································································7-1
Introduction ·············································································································································7-1
Connection Establishment Using NMS···································································································7-1
8Configuring Source IP Address for Telnet Service Packets·································································8-1
Overview·················································································································································8-1
Configuring Source IP Address for Telnet Service Packets ···································································8-1
Displaying Source IP Address Configuration··························································································8-2
9User Control···············································································································································9-1
Introduction ·············································································································································9-1
Controlling Telnet Users ·························································································································9-1
Introduction······································································································································9-1
Controlling Telnet Users by ACL·····································································································9-2
Configuration Example····················································································································9-3
Controlling Network Management Users by Source IP Addresses························································9-3
Prerequisites····································································································································9-4
Controlling Network Management Users by Source IP Addresses·················································9-4
Configuration Example····················································································································9-4
Controlling Web Users by Source IP Address························································································9-5
Prerequisites····································································································································9-5
Controlling Web Users by Source IP Addresses·············································································9-5
Logging Out a Web User·················································································································9-6
Configuration Example····················································································································9-6

1-1
1 Logging In to an Ethernet Switch
Go to these sections for information you are interested in:
zLogging In to an Ethernet Switch
zIntroduction to the User Interface
Logging In to an Ethernet Switch
To manage or configure a Switch 4200G, you can log in to it in one of the following three methods:
zCommand Line Interface
zWeb-based Network Management Interface
zNetwork Management Station
The following table shows the configurations corresponding to each method:
Method Tasks
Logging In Through the Console Port
Logging In Through Telnet
Logging In Using a Modem
Command Line Interface
CLI Configuration
Web-based Network Management Interface Logging In Through the Web-based Network
Management Interface
Network Management Station Logging In Through NMS
Introduction to the User Interface
Supported User Interfaces
The auxiliary (AUX) port and the console port of a 3Com low-end and mid-range Ethernetswitch are the
same port (referred to as console port in the following part). You will be in the AUX user interface if you
log in through this port.
Switch 4200G supports two types of user interfaces:AUX and VTY.
zAUX user interface: A view when you log in through the AUX port. AUX port is a line device port.
zVirtual type terminal (VTY) user interface: A view when you log in through VTY. VTY port is a
logical terminal line used when you access the device by means of Telnet or SSH.

1-2
Table 1-1 Description on user interface
User interface Applicable user Port used Remarks
AUX Users logging in through the
console port Console port Each switch can
accommodate one AUX
user.
VTY Telnet users and SSH users Ethernet port Each switch can
accommodate up to five
VTY users.
One user interface corresponds to one user interface view, where you can configure a set of parameters,
such as whether to authenticate users at login and the user level after login. When the user logs in
through a user interface, the connection follows these parameter settings, thus implementing
centralized management of various sessions.
Relationship Between a User and a User Interface
You can monitor and manage users logging in through different modes by setting different types of user
interfaces. Switch 4200G provides oneAUX user interface and five VTY user interfaces.
zA user interface does not necessarily correspond to a specific user.
zWhen a user logs in, the system automatically assigns the user a free user interface with the
smallest number based on the user login mode. The login process of the user is restricted by the
configurations under this user interface.
zThe user interface assigned to a user depending on the login mode and login time.
A user interface can be used by one user at one time, however, the user interface is not dedicated to a
specific user. For example, user A can use VTY 0 to log in to the device. When user Alogs out, user B
can use VTY 0 to log in to the device.
User Interface Index
Two kinds of user interface index exist: absolute user interface index and relative user interface index.
1) The absolute user interface indexes are as follows:
zThe absolute AUX user interface is numbered 0.
zVTY user interface indexes follow AUX user interface indexes. The first absolute VTY user
interface is numbered 1, the second is 2, and so on.
2) A relative user interface index can be obtained by appending a number to the identifier of a user
interface type. It is generated by user interface type. The relative user interface indexes are as
follows:
zAUX user interfaces is numbered AUX0.
zVTY user interfaces are numbered VTY0, VTY1, and so on.
Common User Interface Configuration
Follow these steps to configure common user interface:

1-3
To do… Use the command… Remarks
Lock the current user
interface lock
Optional
Available in user view
A user interface is not locked
by default.
Specify to send messages
to all user interfaces/a
specified user interface send { all | number | type number } Optional
Available in user view
Free a user interface free user-interface [ type ]number Optional
Available in user view
Enter system view system-view —
Set the banner header [ incoming |legal |login |
shell ]text
Optional
By default, no banner is
configured
Set a system name for the
switch sysname string Optional
Enable copyright
information displaying copyright-info enable
Optional
By default, copyright
displaying is enabled. That is,
the copy right information is
displayed on the terminal after
a user logs in successfully.
Enter user interface view user-interface [ type ] first-number
[last-number ] —
Display the information
about the current user
interface/all user interfaces display users [ all ]
Display the physical
attributes and configuration
of the current/a specified
user interface
display user-interface [ type
number | number ]
Display the information
about the current web users display web users
Optional
Available in any view.

2-1
2 Logging In Through the Console Port
Go to these sections for information you are interested in:
zIntroduction
zSetting Up a Login Environment for Login Through the Console Port
zConsole Port Login Configuration
zConsole Port Login Configuration with Authentication Mode Being None
zConsole Port Login Configuration with Authentication Mode Being Password
zConsole Port Login Configuration with Authentication Mode Being Scheme
Introduction
To log in through the console port is the most common way to log in to a switch. It is also the prerequisite
to configure other login methods. By default, you can locally log in to Switch 4200G through its console
port only.
Table 2-1 lists the default settings of a console port.
Table 2-1 The default settings of a console port
Setting Default
Baud rate 9,600 bps
Flow control None
Check mode (Parity) None
Stop bits 1
Data bits 8
To log in to a switch through the console port, make sure the settings of both the console port and the
user terminal are the same.
After logging in to a switch, you can perform configuration for AUX users. Refer to Console Port Login
Configuration for more.
Setting Up a Login Environment for Login Through the Console Port
Following are the procedures to connect to a switch through the console port.
1) Connect the serial port of your PC/terminal to the console port of the switch, as shown in Figure
2-1.
Figure 2-1 Diagram for connecting to the console port of a switch

2-2
2) If you use a PC to connect to the console port, launch a terminal emulation utility (such as Terminal
in Windows 3.X or HyperTerminal in Windows 9X/Windows 2000/Windows XP. The following
assumes that you are running Windows XP) and perform the configuration shown in Figure 2-2
through Figure 2-4 for the connection to be created. Normally, both sides (that is, the serial port of
the PC and the console port of the switch) are configured as those listed in Table 2-1.
Figure 2-2 Create a connection
Figure 2-3 Specify the port used to establish the connection

2-3
Figure 2-4 Set port parameters
3) Turn on the switch. You will be prompted to press the Enter key if the switch successfully
completes POST (power-on self test). The prompt appears after you press the Enter key.
4) You can then configure the switch or check the information about the switch by executing the
corresponding commands. You can also acquire help by typing the ? character. Refer to related
parts in this manual for information about the commands used for configuring the switch.
Console Port Login Configuration
Common Configuration
Table 2-2 Common configuration of console port login
Configuration Remarks
Baud rate Optional
The default baud rate is 9,600 bps.
Check mode Optional
By default, the check mode of the console port is set to
“none”, which means no check bit.
Stop bits Optional
The default stop bits of a console port is 1.
Console port
configuration
Data bits Optional
The default data bits of a console port is 8.
AUX user interface
configuration
Configure the
command level
available to the
users logging in to
the AUX user
interface
Optional
By default, commands of level 3 are available to the
users logging in to the AUX user interface.
Terminal
configuration Make terminal
services available
Optional
By default, terminal services are available in all user
interfaces

2-4
Configuration Remarks
Set the maximum
number of lines the
screen can contain
Optional
By default, the screen can contain up to 24 lines.
Set history
command buffer
size
Optional
By default, the history command buffer can contain up
to 10 commands.
Set the timeout time
of a user interface Optional
The default timeout time is 10 minutes.
The change to console port configuration takes effect immediately, so the connection may be
disconnected when you log in through a console port and then configure this console port. To configure
a console port, you are recommended to log in to the switch in other ways. To log in to a switch through
its console port after you modify the console port settings, you need to modify the corresponding
settings of the terminal emulation utility running on your PC accordingly in the dialog box shown in
Figure 2-4.
Follow these steps to set common configuration of console port login:
To do… Use the command… Remarks
Enter system view system-view —
Enter AUX user interface view user-interface aux 0 —
Set the baud
rate speed speed-value Optional
The default baud rate of a console
port is 9,600 bps.
Set the check
mode parity { even | none | odd }
Optional
By default, the check mode of a
console port is none, that is, no
check is performed.
Set the stop bits stopbits { 1| 1.5 | 2} Optional
The stop bits of a console port is 1.
Configure
the console
port
Set the databits databits { 7| 8} Optional
The default databits of a console port
is 8.
Configure the command level
available to users logging in to
the user interface user privilege level level
Optional
By default, commands of level 3 are
available to users logging in to the
AUX user interface, and commands
of level 0 are available to users
logging in to the VTY user interface.
Enable terminal services shell Optional
By default, terminal services are
available in all user interfaces.

2-5
To do… Use the command… Remarks
Set the maximum number of
lines the screen can contain screen-length
screen-length
Optional
By default, the screen can contain up
to 24 lines.
You can use the screen-length 0
command to disable the function to
display information in pages.
Set the history command
buffer size history-command
max-size value
Optional
The default history command buffer
size is 10, that is, a history command
buffer of a user can store up to 10
commands by default.
Set the timeout time for the
user interface idle-timeout minutes [ seconds ]
Optional
The default timeout time of a user
interface is 10 minutes.
With the timeout time being 10
minutes, the connection to a user
interface is terminated if no operation
is performed in the user interface
within 10 minutes.
You can use the idle-timeout 0
command to disable the timeout
function.
Console Port Login Configurations for Different Authentication
Modes
Table 2-3 Console port login configurations for different authentication modes
Authentication
mode Authentication related configuration Remarks
None Set the authentication mode to none
Optional
Refer to Console Port
Login Configuration with
Authentication Mode
Being None
Set the authentication mode to local password
authentication
Password Set the password for local authentication
Refer to Console Port
Login Configuration with
Authentication Mode
Being Password.
Set the authentication mode to scheme
Specify to perform local authentication or
remote authentication
Scheme
Set user names and passwords locally or on
AAA Server
Refer to Console Port
Login Configuration with
Authentication Mode
Being Scheme.

2-6
Changes made to the authentication mode for console port login takes effect after you quit the
command-line interface and then log in again.
Console Port Login Configuration with Authentication Mode Being
None
Configuration Procedure
Follow these steps to configure console port login with the authentication mode being none:
To do… Use the command… Remarks
Enter system view system-view —
Enter AUX user interface view user-interface aux 0 —
Configure not to authenticate
users authentication-mode
none
Required
By default, users logging in through
the console port (AUXuser interface)
are not authenticated.
Configuration Example
Network requirements
Assume that the switch is configured to allow users to log in throughTelnet, and the current user level is
set to the administrator level (level 3). Perform the following configurations for users logging in through
the console port (AUX user interface).
zDo not authenticate the users.
zCommands of level 2 are available to the users logging in to the AUX user interface.
zThe baud rate of the console port is 19,200 bps.
zThe screen can contain up to 30 lines.
zThe history command buffer can contain up to 20 commands.
zThe timeout time of the AUX user interface is 6 minutes.

2-7
Network diagram
Figure 2-5 Network diagram for AUX user interface configuration (with the authentication mode being
none)
Configuration PC
running Telnet
Ethernet
GE1/0/1
Configuration procedure
# Enter system view.
<Sysname> system-view
# Enter AUX user interface view.
[Sysname] user-interface aux 0
# Specify not to authenticate users logging in through the console port.
[Sysname-ui-aux0] authentication-mode none
# Specify commands of level 2 are available to users logging in to the AUX user interface.
[Sysname-ui-aux0] user privilege level 2
# Set the baud rate of the console port to 19,200 bps.
[Sysname-ui-aux0] speed 19200
# Set the maximum number of lines the screen can contain to 30.
[Sysname-ui-aux0] screen-length 30
# Set the maximum number of commands the history command buffer can store to 20.
[Sysname-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[Sysname-ui-aux0] idle-timeout 6
After the above configuration, you need to modify the configuration of the terminal emulation utility
running on the PC accordingly in the dialog box shown in Figure 2-4 to log in to the switch successfully.
Console Port Login Configuration with Authentication Mode Being
Password
Configuration Procedure
Follow these steps to configure console port login with the authentication mode being password:

2-8
To do… Use the command… Remarks
Enter system view system-view —
Enter AUX user interface
view user-interface aux 0 —
Configure to authenticate
users using the local
password
authentication-mode
password
Required
By default, users logging in to a switch
through the console port are not
authenticated; while those logging in
through Modems or Telnet are
authenticated.
Set the local password set authentication password { cipher |
simple } password Required
Configuration Example
Network requirements
Assume the switch is configured to allow users to log in through Telnet, and the user level is set to the
administrator level (level 3). Perform the following configurations for users logging in through the
console port (AUX user interface).
zAuthenticate the users using passwords.
zSet the local password to 123456 (in plain text).
zThe commands of level 2 are available to the users.
zThe baud rate of the console port is 19,200 bps.
zThe screen can contain up to 30 lines.
zThe history command buffer can store up to 20 commands.
zThe timeout time of the AUX user interface is 6 minutes.
Network diagram
Figure 2-6 Network diagram for AUX user interface configuration (with the authentication mode being
password)
Configuration PC
running Telnet
Ethernet
GE1/0/1
Configuration procedure
# Enter system view.

2-9
<Sysname> system-view
# Enter AUX user interface view.
[Sysname] user-interface aux 0
# Specify to authenticate users logging in through the console port using the local password.
[Sysname-ui-aux0] authentication-mode password
# Set the local password to 123456 (in plain text).
[Sysname-ui-aux0] set authentication password simple 123456
# Specify commands of level 2 are available to users logging in to the AUX user interface.
[Sysname-ui-aux0] user privilege level 2
# Set the baud rate of the console port to 19,200 bps.
[Sysname-ui-aux0] speed 19200
# Set the maximum number of lines the screen can contain to 30.
[Sysname-ui-aux0] screen-length 30
# Set the maximum number of commands the history command buffer can store to 20.
[Sysname-ui-aux0] history-command max-size 20
# Set the timeout time of the AUX user interface to 6 minutes.
[Sysname-ui-aux0] idle-timeout 6
After the above configuration, you need to modify the configuration of the terminal emulation utility
running on the PC accordingly in the dialog box shown in Figure 2-4 to log in to the switch successfully.
Console Port Login Configuration with Authentication Mode Being
Scheme
Configuration Procedure
Follow these steps to configure console port login with the authentication mode being scheme:
To do… Use the command… Remarks
Enter system view system-view —
Enter AUX user interface view user-interface aux 0 —
Configure to authenticate
users in the scheme mode
authentication-mode
scheme [ command-
authorization ]
Required
The specified AAA scheme
determines what authentication
mode is adopted, local, RADIUS
or HWTACACS.
By default, users logging in
through the console port (AUX
user interface) are not
authenticated.
Quit to system view quit —

2-10
To do… Use the command… Remarks
Enter the
default ISP
domain view domain domain-name
Specify the AAA
scheme to be
applied to the
domain
scheme { local | none |
radius-scheme
radius-scheme-name [ local ]
| hwtacacs-scheme
hwtacacs-scheme-name
[ local ] }
Configure
the
authenticati
on mode
Quit to system
view quit
Optional
By default, the local AAA scheme
is applied.
If you specify to apply the local
AAA scheme, you need to
perform the configuration
concerning local user as well.
If you specify to apply a RADIUS
or HWTACACS scheme, you
need to perform the following
configuration as well:
zPerform RADIUS and
HWTACACS configuration on
the switch. (Refer to the AAA
part for more.)
zConfigure the user name and
password accordingly on the
AAA server. (Refer to the user
manual of AAA server.)
Create a local user (Enter local
user view.) local-user user-name Required
No local user exists by default.
Set the authentication
password for the local user password { simple | cipher }
password Required
Specify the service type for
AUX users service-type terminal [ level level ] Required
Note that:
If you configure to authenticate the users in the scheme mode, the command level available to users
logging in to a switch depends on the command level specified in theAAA scheme:
zWhen the AAA scheme is local authentication, the command level available to users depends on
the service-type terminal [level level ] command.
zWhen the AAA scheme is RADIUS or HWTACACS authentication, you need to set the
corresponding user level on the RADIUS or HWTACACS server.
For the introduction to AAA, RADIUS, and HWTACACS, refer to the AAA part of this manual.
Configuration Example
Network requirements
Assume the switch is configured to allow users to log in through Telnet, and the user level is set to the
administrator level (level 3). Perform the following configurations for users logging in through the
console port (AUX user interface).
zConfigure the local user name as guest.