华为交换机配置（三层交换机配置）

user-interface vty 0 4

rule 3 permit source X.X.X.X 0

port default vlan 100

interface XGigabitEthernet0/0/1

acl 2000 inbound

local-user weiziidc service-type telnet

port trunk allow-pass vlan 100 to 101

telnet server acl 2000

华为5720交换机配置流程：

ip address X.X.X.X 255.255.255.0

rule 5 permit source X.X.X.X 0

authentication-mode aaa

vlan 100

interface GigabitEthernet0/0/1

qos lr outbound cir 102400 cbs 102400

local-user weiziidc privilege level 15

step 1

telnet server port 33899

rule 1 permit source X.X.X.X 0

protocol inbound telnet

ip route-static 0.0.0.0 0.0.0.0 下一跳

...

protocol inbound telnet

interface Vlanif100

文章以X.X.X.X代替IP地址，以s5720为例

进入aaa视图，新建账号，设置密码及权限等级、服务协议

qos lr inbound cir 102400 cbs 102400

port link-type trunk

user-interface vty 16 20

acl 2000 inbound

其他端口按需依次设置。

rule 4 permit source X.X.X.X 0

sys 提高权限

rule 2 permit source X.X.X.X 0

rule 999 deny

aaa

telnet server enable

local-user weiziidc password irreversible-cipher +密码

新建vlan，进入vlan管理，配置IP：

authentication-mode aaa

acl number 2000