华为交换机配置（三层交换机配置）

user-interface vty 16 20

telnet server enable

telnet server port 33899

interface Vlanif100

ip route-static 0.0.0.0 0.0.0.0 下一跳

local-user weiziidc password irreversible-cipher +密码

port trunk allow-pass vlan 100 to 101

interface XGigabitEthernet0/0/1

port link-type trunk

ip address X.X.X.X 255.255.255.0

vlan 100

aaa

rule 3 permit source X.X.X.X 0

sys 提高权限

rule 5 permit source X.X.X.X 0

local-user weiziidc service-type telnet

其他端口按需依次设置。

telnet server acl 2000

authentication-mode aaa

qos lr inbound cir 102400 cbs 102400

port default vlan 100

文章以X.X.X.X代替IP地址，以s5720为例

qos lr outbound cir 102400 cbs 102400

rule 999 deny

acl 2000 inbound

protocol inbound telnet

rule 1 permit source X.X.X.X 0

rule 4 permit source X.X.X.X 0

interface GigabitEthernet0/0/1

local-user weiziidc privilege level 15

...

step 1

acl number 2000

acl 2000 inbound

华为5720交换机配置流程：

新建vlan，进入vlan管理，配置IP：

user-interface vty 0 4

rule 2 permit source X.X.X.X 0

protocol inbound telnet

进入aaa视图，新建账号，设置密码及权限等级、服务协议

authentication-mode aaa