H3C S3610 Series Operation Manual
H3C S3610 Series Operation Manual

H3C S3610 Series Operation Manual

Hide thumbs Also See for S3610 Series:
Table of Contents

Advertisement

Operation Manual - Login
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 Logging into an Ethernet Switch ............................................................................... 1-1
1.1 Logging into an Ethernet Switch ........................................................................................ 1-1
1.2 Introduction to the User Interface ...................................................................................... 1-1
1.2.1 Supported User Interfaces ...................................................................................... 1-1
1.2.2 User Interface Number............................................................................................ 1-1
1.2.3 Common User Interface Configuration ................................................................... 1-2
Chapter 2 Logging in Through the Console Port....................................................................... 2-1
2.1 Introduction ........................................................................................................................ 2-1
2.2 Setting Up the Connection to the Console Port................................................................. 2-1
2.3 Console Port Login Configuration...................................................................................... 2-4
2.3.1 Common Configuration ........................................................................................... 2-4
2.4.1 Configuration Procedure ......................................................................................... 2-6
2.4.2 Configuration Example............................................................................................ 2-8
2.5.1 Configuration Procedure ....................................................................................... 2-10
2.5.2 Configuration Example.......................................................................................... 2-12
2.6.1 Configuration Procedure ....................................................................................... 2-13
2.6.2 Configuration Example.......................................................................................... 2-17
Chapter 3 Logging in Through Telnet ......................................................................................... 3-1
3.1 Introduction ........................................................................................................................ 3-1
3.1.1 Common Configuration ........................................................................................... 3-1
3.1.2 Telnet Configurations for Different Authentication Modes ...................................... 3-2
3.2 Telnet Configuration with Authentication Mode Being None ............................................. 3-4
3.2.1 Configuration Procedure ......................................................................................... 3-4
3.2.2 Configuration Example............................................................................................ 3-5
3.3.1 Configuration Procedure ......................................................................................... 3-7
3.3.2 Configuration Example............................................................................................ 3-9
3.4 Telnet Configuration with Authentication Mode Being Scheme ...................................... 3-11
3.4.1 Configuration Procedure ....................................................................................... 3-11
3.4.2 Configuration Example.......................................................................................... 3-14
3.5 Telnet Connection Establishment .................................................................................... 3-16
3.5.1 Telneting to a Switch from a Terminal................................................................... 3-16
3.5.2 Telneting to Another Switch from the Current Switch ........................................... 3-17

Table of Contents

i
Table of Contents

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the S3610 Series and is the answer not in the manual?

Questions and answers

Summary of Contents for H3C S3610 Series

  • Page 1: Table Of Contents

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Logging into an Ethernet Switch ................1-1 1.1 Logging into an Ethernet Switch ..................1-1 1.2 Introduction to the User Interface ..................1-1 1.2.1 Supported User Interfaces ..................
  • Page 2 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Table of Contents Chapter 4 Logging in Using Modem.................... 4-1 4.1 Introduction ........................4-1 4.2 Configuration on the Administrator Side................4-1 4.3 Configuration on the Switch Side..................4-1 4.3.1 Modem Configuration....................4-1 4.3.2 Switch Configuration ....................
  • Page 3: Chapter 1 Logging Into An Ethernet Switch

    VTY users. Note: As the AUX port and the Console port of a H3C series switch are the same one, you will be in the AUX user interface if you log in through this port. 1.2.2 User Interface Number Two kinds of user interface index exist: absolute user interface index and relative user interface index.
  • Page 4: Common User Interface Configuration

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 1 Logging into an Ethernet Switch VTY user interfaces: Numbered after AUX user interfaces and increases in the step of 1 A relative user interface index can be obtained by appending a number to the identifier of a user interface type.
  • Page 5 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 1 Logging into an Ethernet Switch To do… Use the command… Remarks Optional The default timeout time of a user interface is 10 minutes. With the timeout time being 10 minutes, the...
  • Page 6: Chapter 2 Logging In Through The Console Port

    Chapter 2 Logging in Through the Console Port Chapter 2 Logging in Through the Console Port Note: The default system name of S3610&S5510 series Ethernet switches is H3C, that is, the command line prompt is H3C. All the following examples take H3C as the command line prompt.
  • Page 7 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port RS-232 port RS-232 port Console port Console port Configuration cable Configuration cable Figure 2-1 Diagram for setting the connection to the Console port If you use a PC to connect to the Console port, launch a terminal emulation utility (such as Terminal in Windows 3.X or HyperTerminal in Windows 9X/Windows...
  • Page 8 Turn on the switch. The user will be prompted to press the Enter key if the switch successfully completes POST (power-on self test). The prompt (such as <H3C>) appears after the user presses the Enter key, as shown in Figure 2-5.
  • Page 9: Console Port Login Configuration

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port 2.3 Console Port Login Configuration 2.3.1 Common Configuration Table 2-2 lists the common configuration of Console port login. Table 2-2 Common configuration of Console port login...
  • Page 10: Console Port Login Configurations For Different Authentication Modes

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port Caution: Changing of Console port configuration terminates the connection to the Console port. To establish the connection again, you need to modify the configuration of the termination emulation utility running on your PC accordingly.
  • Page 11: Console Port Login Configuration With Authentication Mode Being None

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port Authentication Console port login Description mode configuration Optional Specify configuration perform local specifies Local authentication authenticatio whether performed by default. n or RADIUS...
  • Page 12 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port To do… Use the command… Remarks Required Configure authentication-mode By default, users logging in authenticate users none through the Console port are not authenticated.
  • Page 13: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port To do… Use the command… Remarks Optional The default history command Set the history command history-command buffer size is 10. That is, a...
  • Page 14 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port The screen can contain up to 30 lines. The history command buffer can contain up to 20 commands. The timeout time of the AUX user interface is 6 minutes.
  • Page 15: Console Port Login Configuration With Authentication Mode Being Password

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port After the above configuration, to ensure a successful login, the console user needs to change the corresponding configuration of the terminal emulation program running on the PC, to make the configuration consistent with that on the switch.
  • Page 16 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port To do… Use the command… Remarks Optional Define a shortcut key activation-key for starting terminal By default, pressing Enter key character sessions starts the terminal session.
  • Page 17: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port Table 2-5 Determine the command level (B) Scenario Command Authentication level User type Command mode The user privilege level level command Level 3...
  • Page 18: Console Port Login Configuration With Authentication Mode Being Scheme

    [H3C-ui-aux0] authentication-mode password # Set the local password to 123456 (in plain text). [H3C-ui-aux0] set authentication password simple 123456 # Specify commands of level 2 are available to the user logging into the AUX user interface. [H3C-ui-aux0] user privilege level 2 # Set the baud rate of the Console port to 19,200 bps.
  • Page 19 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port To do… Use the command… Remarks Enter the Optional default By default, the local AAA scheme domain Domain is applied. If you specify to apply...
  • Page 20 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port To do… Use the command… Remarks Optional Set the The default baud rate of the AUX baud speed speed-value port (also the Console port) is rate 9,600 bps.
  • Page 21 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port To do… Use the command… Remarks Optional The default timeout time of a user interface is 10 minutes. With the timeout time being 10...
  • Page 22: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port 2.6.2 Configuration Example I. Network requirements Assume the switch is configured to allow you to login through Telnet, and your user level is set to the administrator level (level 3). After you telnet to the switch, you need to limit the console user at the following aspects.
  • Page 23 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 2 Logging in Through the Console Port # Set the service type to Terminal, Specify commands of level 2 are available to the user logging into the AUX user interface.
  • Page 24: Chapter 3 Logging In Through Telnet

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Chapter 3 Logging in Through Telnet 3.1 Introduction You can telnet to a remote switch to manage and maintain the switch. To achieve this, you need to configure both the switch and the Telnet terminal properly.
  • Page 25: Telnet Configurations For Different Authentication Modes

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Table 3-2 Common Telnet configuration Configuration Description Optional Configure the command level available to users By default, commands of level 0 are logging into the VTY user...
  • Page 26 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Table 3-3 Telnet configurations for different authentication modes Authentication Telnet configuration Description mode Perform Perform Optional common common Telnet None Refer to Table 3-2. configuration...
  • Page 27: Telnet Configuration With Authentication Mode Being None

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet 3.2 Telnet Configuration with Authentication Mode Being None 3.2.1 Configuration Procedure To do… Use the command… Remarks — Enter system view system-view user-interface Enter one or more VTY —...
  • Page 28: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet To do… Use the command… Remarks Optional default history command buffer size is Set the history command history-command 10. That is, a history buffer size...
  • Page 29 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Do not authenticate users logging into VTY 0. Commands of level 2 are available to users logging into VTY 0. Telnet protocol is supported. The screen can contain up to 30 lines.
  • Page 30: Telnet Configuration With Authentication Mode Being Password

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet 3.3 Telnet Configuration with Authentication Mode Being Password 3.3.1 Configuration Procedure To do… Use the command… Remarks — Enter system view system-view user-interface Enter one or more VTY —...
  • Page 31 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet To do… Use the command… Remarks Optional By default, the screen can contain up to 24 lines. Set the maximum number screen-length of lines the screen can...
  • Page 32: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Table 3-5 Determine the command level when users logging into switches are authenticated in the password mode Scenario Command Authentication level User type Command mode...
  • Page 33 # Configure to authenticate users logging into VTY 0 using the local password. [H3C-ui-vty0] authentication-mode password # Set the local password to 123456 (in plain text). [H3C-ui-vty0] set authentication password simple 123456 # Specify commands of level 2 are available to users logging into VTY 0. [H3C-ui-vty0] user privilege level 2 # Configure Telnet protocol is supported.
  • Page 34: Telnet Configuration With Authentication Mode Being Scheme

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet 3.4 Telnet Configuration with Authentication Mode Being Scheme 3.4.1 Configuration Procedure To do… Use the command… Remarks Enter system view system-view — Enter the Optional...
  • Page 35 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet To do… Use the command… Remarks Configure Optional command level user privilege level By default, commands of level 0 available users level are available to users logging into logging into the user the VTY user interfaces.
  • Page 36 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Note that if you configure to authenticate the users in the scheme mode, the command level available to users logging into a switch depends on the authentication-mode...
  • Page 37: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet Scenario Command Authenticat level User type Command ion mode user privilege level level command is not executed, and the service-type command does not Level 0 specify the available command level.
  • Page 38 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet II. Network diagram RS-232 RS-232 Console port Console port Console cable Console cable Figure 3-3 Network diagram for Telnet configuration (with the authentication mode being scheme) III.
  • Page 39: Telnet Connection Establishment

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 3 Logging in Through Telnet 3.5 Telnet Connection Establishment 3.5.1 Telneting to a Switch from a Terminal You can telnet to a switch and then configure the switch if the interface of the management VLAN of the switch is assigned with an IP address.
  • Page 40: Telneting To Another Switch From The Current Switch

    Step 5: Enter the password when the Telnet window displays “Login authentication” and prompts for login password. The CLI prompt (such as <H3C>) appears if the password is correct. If all VTY user interfaces of the switch are in use, you will fail to establish the connection and receive the message that says “All user interfaces are used, please try...
  • Page 41 You can use the ip host to assign a host name to a switch. Step 4: Enter the password. If the password is correct, the CLI prompt (such as <H3C>) appears. If all VTY user interfaces of the switch are in use, you will fail to establish the connection and receive the message that says “All user interfaces are used, please try...
  • Page 42: Chapter 4 Logging In Using Modem

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 4 Logging in Using Modem Chapter 4 Logging in Using Modem 4.1 Introduction The administrator can log into the Console port of a remote switch using a modem through PSTN (public switched telephone network) if the remote switch is connected to the PSTN through a modem to configure and maintain the switch remotely.
  • Page 43: Switch Configuration

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 4 Logging in Using Modem ATS0=1 ----------------------- Configure to answer automatically after the first ring AT&D ----------------------- Ignore DTR signal AT&K0 ----------------------- Disable flow control AT&R1 ----------------------- Ignore RTS signal AT&S0...
  • Page 44: Modem Connection Establishment

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 4 Logging in Using Modem II. Configuration on switch when the authentication mode is password Refer to section 2.5 "Console Port Login Configuration with Authentication Mode Being Password” III. Configuration on switch when the authentication mode is scheme Refer to section 2.6...
  • Page 45 Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 4 Logging in Using Modem ial cable ial cable Mode Mode Telephone line Telephone line PSTN PSTN Modem Modem Console port Console port Telephone number: Telephone number: 82882285 82882285 Figure 4-1 Establish the connection by using modem Step 4: Launch a terminal emulation utility on the PC and set the telephone number to call the modem directly connected to the switch, as shown in Figure 4-2 and Figure 4-3.
  • Page 46 Step 5: Provide the password when prompted. If the password is correct, the prompt (such as <H3C>) appears. You can then configure or manage the switch. You can also enter the character ? at anytime for help. Refer to the following chapters for information about the configuration commands.
  • Page 47: Chapter 5 Logging In Through Web-Based Network Management System

    Operation Manual – Login Chapter 5 Logging in Through Web-based Network H3C S3610&S5510 Series Ethernet Switches Management System Chapter 5 Logging in Through Web-based Network Management System 5.1 Introduction An S3610&S5510 series switch has a Web server built in. You can log into an S3610&S5510 series switch through a Web browser and manage and maintain the...
  • Page 48 Operation Manual – Login Chapter 5 Logging in Through Web-based Network H3C S3610&S5510 Series Ethernet Switches Management System <H3C> system-view [H3C] interface vlan-interface 1 [H3C-Vlan-interface1] ip address 10.153.17.82 255.255.255.0 Step 2: Configure the user name and the password for the Web-based network management system.
  • Page 49: Web Server Shutdown/Startup

    Operation Manual – Login Chapter 5 Logging in Through Web-based Network H3C S3610&S5510 Series Ethernet Switches Management System Figure 5-2 The login page of the Web-based network management system 5.3 Web Server Shutdown/Startup You can shut down or start up the Web server.
  • Page 50: Chapter 6 Logging In Through Nms

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 6 Logging in Through NMS Chapter 6 Logging in Through NMS 6.1 Introduction You can also log into a switch through an NMS (network management station), and then configure and manage the switch through the agent module on the switch.
  • Page 51: Connection Establishment Using Nms

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 6 Logging in Through NMS 6.2 Connection Establishment Using NMS Switch Switch HTTP Connection HTTP Connection Figure 6-1 Network diagram for logging in through an NMS...
  • Page 52: Chapter 7 Controlling Login Users

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users Chapter 7 Controlling Login Users 7.1 Introduction A switch provides ways to control different types of login users, as listed in Table 7-1. Table 7-1 Ways to control different types of login users...
  • Page 53: Controlling Telnet Users By Source And Destination Ip Addresses

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users To do… Use the command… Remarks — Enter system view system-view acl [ ipv6 ] number As for the acl number Create a basic ACL or...
  • Page 54: Controlling Telnet Users By Source Mac Addresses

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users To do… Use the command… Remarks user-interface [ type ] — Enter user interface view first-number [ last-number ] Required The inbound keyword specifies to filter the users...
  • Page 55: Configuration Example

    III. Configuration procedure # Define a basic ACL. <H3C> system-view [H3C] acl number 2000 match-order config [H3C-acl-basic-2000] rule 1 permit source 10.110.100.52 0 [H3C-acl-basic-2000] rule 2 permit source 10.110.100.46 0 [H3C-acl-basic-2000] rule 3 deny source any [H3C-acl-basic-2000] quit # Apply the ACL.
  • Page 56: Prerequisites

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users 7.3.1 Prerequisites The controlling policy against network management users is determined, including the source IP addresses to be controlled and the controlling actions (permitting or denying).
  • Page 57: Configuration Example

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users To do… Use the command… Remarks snmp-agent usm-user { v1 | v2c } user-name group-name acl-number ] snmp-agent usm-user Apply while user-name configuring SNMP Required group-name...
  • Page 58: Controlling Web Users By Source Ip Address

    [H3C] snmp-agent community read h3c acl 2000 [H3C] snmp-agent group v2c h3cgroup acl 2000 [H3C] snmp-agent usm-user v2c h3cuser h3cgroup acl 2000 7.4 Controlling Web Users by Source IP Address You can manage a S3610&S5510 series Ethernet switch remotely through Web. Web users can access a switch through HTTP connections.
  • Page 59: Controlling Web Users By Source Ip Addresses

    Operation Manual – Login H3C S3610&S5510 Series Ethernet Switches Chapter 7 Controlling Login Users 7.4.2 Controlling Web Users by Source IP Addresses Controlling Web users by source IP addresses is achieved by applying basic ACLs, which are numbered from 2000 to 2999.
  • Page 60 # Define a basic ACL. <H3C> system-view [H3C] acl number 2030 match-order config [H3C-acl-basic-2030] rule 1 permit source 10.110.100.46 0 [H3C-acl-basic-2030] rule 2 deny source any # Apply the ACL to only permit the Web users sourced from the IP address of 10.110.100.46 to access the switch.

This manual is also suitable for:

S5510 series

Table of Contents