华为交换机配置（三层交换机配置）

protocol inbound telnet

qos lr inbound cir 102400 cbs 102400

authentication-mode aaa

ip route-static 0.0.0.0 0.0.0.0 下一跳

port trunk allow-pass vlan 100 to 101

interface XGigabitEthernet0/0/1

rule 2 permit source X.X.X.X 0

telnet server enable

port link-type trunk

local-user weiziidc service-type telnet

其他端口按需依次设置。

protocol inbound telnet

rule 1 permit source X.X.X.X 0

rule 999 deny

telnet server acl 2000

user-interface vty 16 20

user-interface vty 0 4

authentication-mode aaa

新建vlan，进入vlan管理，配置IP：

aaa

port default vlan 100

华为5720交换机配置流程：

acl 2000 inbound

rule 3 permit source X.X.X.X 0

local-user weiziidc privilege level 15

interface GigabitEthernet0/0/1

文章以X.X.X.X代替IP地址，以s5720为例

rule 5 permit source X.X.X.X 0

qos lr outbound cir 102400 cbs 102400

local-user weiziidc password irreversible-cipher +密码

telnet server port 33899

step 1

acl number 2000

sys 提高权限

interface Vlanif100

ip address X.X.X.X 255.255.255.0

...

acl 2000 inbound

进入aaa视图，新建账号，设置密码及权限等级、服务协议

rule 4 permit source X.X.X.X 0

vlan 100