华为交换机配置（三层交换机配置）

protocol inbound telnet

sys 提高权限

rule 2 permit source X.X.X.X 0

port trunk allow-pass vlan 100 to 101

ip address X.X.X.X 255.255.255.0

qos lr outbound cir 102400 cbs 102400

authentication-mode aaa

authentication-mode aaa

rule 3 permit source X.X.X.X 0

vlan 100

local-user weiziidc password irreversible-cipher +密码

ip route-static 0.0.0.0 0.0.0.0 下一跳

...

rule 999 deny

qos lr inbound cir 102400 cbs 102400

其他端口按需依次设置。

rule 4 permit source X.X.X.X 0

进入aaa视图，新建账号，设置密码及权限等级、服务协议

interface XGigabitEthernet0/0/1

local-user weiziidc service-type telnet

新建vlan，进入vlan管理，配置IP：

port link-type trunk

华为5720交换机配置流程：

interface GigabitEthernet0/0/1

user-interface vty 16 20

acl 2000 inbound

aaa

rule 5 permit source X.X.X.X 0

user-interface vty 0 4

telnet server port 33899

telnet server enable

telnet server acl 2000

protocol inbound telnet

local-user weiziidc privilege level 15

step 1

rule 1 permit source X.X.X.X 0

port default vlan 100

文章以X.X.X.X代替IP地址，以s5720为例

acl 2000 inbound

acl number 2000

interface Vlanif100