H3C WA Series WLAN Access Points. Fundamentals Command Reference

Transcription

1 H3C WA Series WLAN Access Points Fundamentals Command Reference Abstract This document details the commands for the WA series WLAN access points. Intended audience includes network planners, field technical support and network administrators. Hangzhou H3C Technologies Co., Ltd.

2 Copyright , Hangzhou H3C Technologies Co., Ltd. and its licensors No part of this manual may be reproduced or transmitted in any form or by any means without the prior written consent of Hangzhou H3C Technologies Co., Ltd. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents. However, the statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied. Hangzhou H3C Technologies Co., Ltd. and its licensors shall not be liable for technical or editorial errors or omissions contained herein. Acknowledgments H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this guide are the property of their respective owners. 2

3 Table of Contents 1 CLI commands 10 command-alias enable 10 command-alias mapping 10 command-privilege level 11 display command-alias 13 display history-command 14 display hotkey 15 hotkey 17 quit 18 return 19 screen-length disable 20 system-view 20 2 Commands for logging in to an access point 23 activation-key 23 authentication-mode 24 auto-execute command 25 command accounting 27 command authorization 27 copyright-info enable 28 databits 29 display history-command 30 display user-interface 30 display users 32 display web users 34 escape-key 34 free user-interface 36 free web-users 37 3

4 history-command max-size 37 idle-timeout 38 lock 39 parity 39 protocol inbound 40 screen-length 41 send 42 set authentication password 44 shell 45 speed (user interface view) 45 telnet 46 telnet ipv6 47 telnet server enable 48 terminal type 49 user-interface 49 user privilege level 50 3 Commands for Controlling Login Users 52 acl (in user interface view) 52 4 File management commands 54 cd 54 copy 55 delete 55 dir 56 execute 57 file prompt 58 fixdisk 59 format 59 mkdir 60 more 60 move 61 4

5 pwd 62 rename 62 reset recycle-bin 63 rmdir 64 undelete 64 5 Configuration file management commands 66 archive configuration 66 archive configuration interval 66 archive configuration location 67 archive configuration max 68 backup startup-configuration 69 configuration replace file 70 display archive configuration 71 display saved-configuration 71 display startup 73 reset saved-configuration 74 restore startup-configuration 75 save 75 startup saved-configuration 77 6 FTP Configuration Commands 79 ascii 79 binary 80 bye 80 cdup 81 close 81 debugging 82 delete 83 dir 84 disconnect 85 display ftp client configuration 85 5

6 ftp 86 ftp client source 87 ftp ipv6 88 get 89 lcd 90 ls 91 mkdir 92 open 92 open ipv6 93 passive 94 put 95 pwd 95 quit 96 remotehelp 96 rmdir 98 user 99 verbose TFTP Configuration Commands 102 display tftp client configuration 102 tftp-server acl 102 tftp 103 tftp client source 105 tftp ipv Device Management Commands 107 boot-loader 107 bootrom 108 display boot-loader 109 display cpu-usage 109 display cpu-usage history 111 display device 113 6

7 display device manuinfo 114 display environment 115 display job 116 display memory 117 display reboot-type 118 display schedule reboot 118 display system-failure 119 job 119 reboot 120 reset unused porttag 121 schedule reboot at 121 schedule reboot delay 123 system-failure 124 temperature-limit 125 time 126 view Basic Configuration Commands 130 clock datetime 130 clock summer-time one-off 131 clock summer-time repeating 132 clock timezone 133 configure-user count 134 display clipboard 135 display clock 136 display configure-user 136 display current-configuration 137 display diagnostic-information 139 display this 140 display version 141 header 142 7

8 super 143 super authentication-mode 145 super password 146 sysname HTTP Configuration Commands 148 display ip http 148 ip http acl 149 ip http enable 150 ip http port HTTPS Configuration Commands 152 display ip https 152 ip https acl 153 ip https certificate access-control-policy 154 ip https enable 155 ip https port 155 ip https ssl-server-policy Support and other resources 158 Related documentation 158 Contacting H3C 158 Obtaining documentation 158 Document conventions and symbols 159 Conventions 159 Symbols 159 NOTE: Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix. The interface types and the number of interfaces vary by AP model. The display information varies by AP model and configuration. 8

9 The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. 9

10 1 CLI commands command-alias enable command-alias enable undo command-alias enable System view 2: System level None Use the command-alias enable command to enable the command alias function. Use the undo command-alias enable command to disable the command alias function. By default, the command alias function is disabled, which means you cannot configure command aliases. Example 1: Enable the command alias function. <Sysname> system-view [Sysname] command-alias enable Example 2: Disable the command alias function. <Sysname> system-view [Sysname] undo command-alias enable command-alias mapping command-alias mapping cmdkey alias 10

11 undo command-alias mapping cmdkey System view 2: System level cmdkey: The complete form of the first keyword of a command for which an alias will be configured. alias: Specifies the command alias, which cannot be the same as the first keyword of an existing command. Use the command-alias mapping command to configure command aliases. Use the undo command-alias mapping command to delete command aliases. By default, a command does not have an alias. Example 1: Create show as the command alias for the display command. <Sysname> system-view [Sysname] command-alias mapping display show After the above configuration, you can use the alias show clock to view the system time and date rather than display clock. Example 2: Use the undo command-alias mapping command to delete the alias for the display command. <Sysname> system-view [Sysname] undo command-alias mapping display command-privilege level command-privilege level level view view command undo command-privilege view view command System view 11

12 level level: Command level, which ranges from 0 to 3. view view: Specifies a view. The value shell of the argument view represents user view. The specified view must be the view to which the command provided by the command argument belongs; for the corresponding view, see the "" section of the specified command. command: Command to be set in the specified view. Use the command-privilege command to assign a level for the specified command in the specified view. Use the undo command-privilege view command to restore the default. By default, each command in a view has its specified level. For more information, see Basic System Configuration in the Fundamentals Command Reference. Command level falls into four levels: visit, monitor, system, and manage, which are identified by 0 through 3. The administrator can assign a privilege level for a user according to his need. When the user logs on to a device, the available commands depend on the user s privilege level. For example, if a user s privilege is 3 and the command privilege of VTY 0 user interface is 1, and the user logs on the system from VTY 0, he or she can use all the commands with privilege levels lower than than three. Use the default command level or modify the command level under the guidance of professional staff; otherwise, the change of command level may introduce maintenance, operation, or security problems. When you configure the command-privilege command, the value of the command argument must be a complete form of the specified command, that is, you must enter all needed keywords and arguments of the command. The argument should be in the value range. For example, the default level of the tftp server-address { get put sget } source-filename [ destination-filename ] [ source { interface interface-type interface-number ip source-ip-address } ] command is 3; after the command-privilege level 0 view shell tftp put a.cfg command is executed, when users with the user privilege level of 0 log in to the device, they can execute the tftp server-address put source-filename command (such as the tftp put syslog.txt command); users with the user privilege level of 0 cannot execute the command with the get, sget or source keyword, and cannot specify the destination-filename argument. 12

13 When you configure the undo command-privilege view command, the value of the command argument can be an abbreviated form of the specified command, that is, you only need to enter the keywords at the beginning of the command. For example, after the undo command-privilege view system ftp command is executed, all commands starting with the keyword ftp (such as ftp server acl, ftp server enable, and ftp timeout) are restored to the default level; if you have modified the command level of commands ftp server enable and ftp timeout, and you want to restore only the ftp server enable command to its default level, use the undo command-privilege view system ftp server command. If you change the command level of a command in a specified view from the default command level to a lower level, you must modify the command levels of the quit command and the corresponding command that is used to enter this view. For example, the default command level of commands interface and system-view is 2 (system level); if you want to make the interface command available to the users with the user privilege level of 1, you must execute the following three commands: command-privilege level 1 view shell system-view, command-privilege level 1 view system interface ethernet 1/1, and command-privilege level 1 view system quit, so that the login users with the user privilege level of 1 can enter system view, execute the interface ethernet command, and then return to user view. Set the command level of the system-view command in user view to 3. (By default, users with the user privilege level of 2 or 3 can use the system-view command after login; after the following configuration, only users with the user privilege level of 3 can use this command to enter system view and configure the device. This improves device security.) <Sysname> system-view [Sysname] command-privilege level 3 view shell system-view display command-alias display command-alias Any view 1: Monitor level None 13

14 Use the display command-alias command to view defined command aliases and the corresponding commands. Display the defined command aliases and the corresponding commands. <Sysname> display command-alias Command alias is enabled index alias command key 1 show display display history-command display history-command Any view 1: Monitor level None Use the display history-command command to display up to 256 recently executed history commands. Related commands: history-command max-size. Display history commands. (The prompt information depends on the current configuration.) <Sysname> display history-command system-view quit display current-configuration HOTKEY =Defined hotkeys= Hotkeys Command CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debugging all 14

15 =Undefined hotkeys= Hotkeys Command CTRL_T NULL CTRL_U NULL =System hotkeys= Hotkeys Function CTRL_A Move the cursor to the beginning of the current line. CTRL_B Move the cursor one character left. CTRL_C Stop current command function. CTRL_D Erase current character. CTRL_E Move the cursor to the end of the current line. CTRL_F Move the cursor one character right. CTRL_H Erase the character left of the cursor. CTRL_K Kill outgoing connection. CTRL_N Display the next command from the history buffer. CTRL_P Display the previous command from the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word left of the cursor. CTRL_X Delete all characters up to the cursor. CTRL_Y Delete all characters after the cursor. CTRL_Z Return to the User. CTRL_] Kill incoming connection or redirect connection. ESC_B Move the cursor one word back. ESC_D Delete remainder of word. ESC_F Move the cursor forward one word. ESC_N Move the cursor down a line. ESC_P Move the cursor up a line. ESC_< Specify the beginning of clipboard. ESC_> Specify the end of clipboard. display hotkey display hotkey Any view 1: Monitor level None 15

16 Use the display hotkey command to display hotkey information. Display hotkey information. <Sysname> display hotkey HOTKEY =Defined hotkeys= Hotkeys Command CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debugging all =Undefined hotkeys= Hotkeys Command CTRL_T NULL CTRL_U NULL =System hotkeys= Hotkeys Function CTRL_A Move the cursor to the beginning of the current line. CTRL_B Move the cursor one character left. CTRL_C Stop current command function. CTRL_D Erase current character. CTRL_E Move the cursor to the end of the current line. CTRL_F Move the cursor one character right. CTRL_H Erase the character left of the cursor. CTRL_K Kill outgoing connection. CTRL_N Display the next command from the history buffer. CTRL_P Display the previous command from the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word left of the cursor. CTRL_X Delete all characters up to the cursor. CTRL_Y Delete all characters after the cursor. CTRL_Z Return to the User. CTRL_] Kill incoming connection or redirect connection. ESC_B Move the cursor one word back. ESC_D Delete remainder of word. ESC_F Move the cursor forward one word. ESC_N Move the cursor down a line. ESC_P Move the cursor up a line. ESC_< Specify the beginning of clipboard. ESC_> Specify the end of clipboard. 16

17 hotkey hotkey { CTRL_G CTRL_L CTRL_O CTRL_T CTRL_U } command undo hotkey { CTRL_G CTRL_L CTRL_O CTRL_T CTRL_U } System view 2: System level CTRL_G: Assigns the hot key Ctrl+G to a command. CTRL_L: Assigns the hot key Ctrl+L to a command. CTRL_O: Assigns the hot key Ctrl+O to a command. CTRL_T: Assigns the hot key Ctrl+T to a command. CTRL_U: Assigns the hot key Ctrl+U to a command. command: The command line associated with the hot key. Use the hotkey command to assign a hot key to a specific command line. Use the undo hotkey command to restore the default. By default, the system specifies corresponding commands for Ctrl+G, Ctrl+L and Ctrl+O, while the others are null. You can customize this scheme as needed. Example 1: Ctrl+G corresponds to display current-configuration Ctrl+L corresponds to display ip routing-table Ctrl+O corresponds to undo debugging all Assign the hot key Ctrl+T to the display tcp status command. <Sysname> system-view [Sysname] hotkey ctrl_t display tcp status Example 2: Display the configuration of hotkeys. [Sysname] display hotkey HOTKEY

18 =Defined hotkeys= Hotkeys Command CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debugging all CTRL_T display tcp status =Undefined hotkeys= Hotkeys Command CTRL_U NULL =System hotkeys= Hotkeys Function CTRL_A Move the cursor to the beginning of the current line. CTRL_B Move the cursor one character left. CTRL_C Stop current command function. CTRL_D Erase current character. CTRL_E Move the cursor to the end of the current line. CTRL_F Move the cursor one character right. CTRL_H Erase the character left of the cursor. CTRL_K Kill outgoing connection. CTRL_N Display the next command from the history buffer. CTRL_P Display the previous command from the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word left of the cursor. CTRL_X Delete all characters up to the cursor. CTRL_Y Delete all characters after the cursor. CTRL_Z Return to the User. CTRL_] Kill incoming connection or redirect connection. ESC_B Move the cursor one word back. ESC_D Delete remainder of word. ESC_F Move the cursor forward one word. ESC_N Move the cursor down a line. ESC_P Move the cursor up a line. ESC_< Specify the beginning of clipboard. ESC_> Specify the end of clipboard. quit quit 18

19 Any view 0: Visit level (in user view) 2: System level (in other views) None Use the quit command to exit to a lower-level view. If the current view is user view, the quit command terminates the current connection and quits the system. Switch from Ethernet 1/0/1 interface view to system view, and then back to user view. [Sysname-Ethernet1/0/1] quit [Sysname] quit <Sysname> return return Any view except user view 2: System level None Use the return command to return to user view from current view (nonuser view). You can also use the hot key Ctrl+Z to return to user view from the current view (nonuser view), which equals execution of the return command. Related commands: quit. Return to user view from Ethernet1/0/1 view. [Sysname-Ethernet1/0/1] return <Sysname> 19

20 screen-length disable screen-length disable undo screen-length disable User view 1: Monitor level None Use the screen-length disable command to disable the multiple-screen output function of the current user. Use the undo screen-length disable command to enable the multiple-screen output function of the current user. By default, a login user uses the settings of the screen-length command. The default settings of the screen-length command are: multiple-screen output is enabled and 24 lines are displayed on the next screen. (For more information about the screen-length command, see User Interface in the Fundamentals Command Reference.) This command is applicable to the current user only and when a user re-logs in, the settings restore to the system default. Disable multiple-screen output of the current user. <Sysname> screen-length disable system-view system-view User view 2: System level 20

21 None Use the system-view command to enter system view from the current user view. Related commands: quit, return. Enter system view from the current user view. <Sysname> system-view System : return to User with Ctrl+Z. [Sysname] 21

22 22

23 2 Commands for logging in to an access point activation-key activation-key character undo activation-key User interface view character: Shortcut key for starting terminal sessions, a single character (or its corresponding ASCII code value in the range 0 to 127) or a string of 1 to 3 characters. But in fact, only the first character functions as the shortcut key. For example, if you input an ASCII code value 97, the system uses its corresponding character a as the shortcut key; if you input the string b@c, the system will use the first letter b as the shortcut key. Use the activation-key command to define a shortcut key for starting a terminal session. Use the undo activation-key command to restore the default. By default, pressing the Enter key starts the terminal sessions. However, if you define a new shortcut key using the activation-key command, the Enter key is no longer functional. You can use the display current-configuration command to display the shortcut key you have defined. NOTE: The display current-configuration command is not supported on the VTY user interface. Use letter s as the shortcut key for starting terminal sessions on the console port. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] activation-key s To verify the configuration, do the following: 23

24 Exit the terminal session on the console port. [Sysname-ui-console0] return <Sysname> quit ****************************************************************************** * Copyright (c) Hangzhou H3C Tech. Co., Ltd. All rights reserved. * * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * ****************************************************************************** User interface con0 is available. Please press ENTER. Enter s at the prompt of Please press ENTER. You will see the terminal session start. <Sysname> %Mar 2 18:40:27: Sysname SHELL/5/LOGIN: Console login from con0 authentication-mode authentication-mode { none password scheme } undo authentication-mode User interface view none: Performs no authentication. password: Performs local password authentication. scheme: Performs AAA authentication. For more information about AAA, see AAA in the Security Configuration Guide. Use the authentication-mode command to set the authentication mode when users log onto the device using the current user interface. Use the undo authentication-mode command to restore the default. By default, the authentication mode is password for VTY user interface and is none for console interface. Related commands: set authentication password. 24

25 Example 1: Eliminate authentication when users use VTY 0 interface to log onto the device. (This mode may be insecure.) <Sysname> system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] authentication-mode none Example 2: Use password authentication when users use VTY 0 interface to log onto the device. The authentication password is 321. <Sysname> system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] authentication-mode password [Sysname-ui-vty0] set authentication password cipher 321 Example 3: Use username and password authentication when users use VTY 0 interface to log onto the device. The username is 123 and the authentication password is 321. <Sysname> system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] authentication-mode scheme [Sysname-ui-vty0] quit [Sysname] local-user 123 [Sysname-luser-123] password cipher 321 [Sysname-luser-123] service-type telnet [Sysname-luser-123] authorization-attribute level 3 auto-execute command auto-execute command command undo auto-execute command User interface view command: Command to be automatically executed. Use the auto-execute command command to specify a command to be executed automatically. Use the undo auto-execute command command to disable this feature. 25

26 By default, command auto-execution is disabled. The auto-execute command command is supported on all types of user interfaces except the console port. Once a command is configured using the auto-execute command command, the system automatically executes the command when a user logs on from the interface where the command is configured. After the command is completed, the connection breaks automatically. An example for using this command is configuring the telnet command to let users telnet to the specified host automatically. CAUTION: The auto-execute command command may prevent you from configuring the system through the terminal line to which the command is applied. Therefore, before configuring the command and saving the configuration (using the save command), make sure that you can access the system by other means to remove the configuration in case a problem occurs. Automatically execute the display brief interface loopback command after a user logs on from the VTY 0 interface. <Sysname> system-view [Sysname] user-interface vty 0 4 [Sysname-ui-vty0-4] auto-execute command display brief interface loopback % This action will lead to configuration failure through ui-vty0-4. Are you sure? [Y/N]:y [Sysname-ui-vty0-4] Telnet to the device again, the display brief interface loopback command will be executed automatically before the telnet connection breaks. The following information is displayed: ****************************************************************************** * Copyright (c) Hangzhou H3C Tech. Co., Ltd. All rights reserved. * * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * ****************************************************************************** <Sysname> The brief information of interface(s) under route mode: Interface Link Protocol-link Protocol type Main IP Loop1 UP UP(spoofing) LOOP -- <Sysname> 26

27 command accounting command accounting undo command accounting User interface view None Use the command accounting command to enable command accounting. Use the undo command accounting command to restore the default. By default, command accounting is disabled, that is, the accounting server does not record the commands that the user executed. If command accounting is enabled, every executed command is recorded on the HWTACACS server. If both command accounting and command authorization are enabled, only the authorized and executed commands are recorded on the HWTACACS server. Enable command accounting for VTY 0. Then the HWTACACS server records the commands executed by the users logging in from VTY 0. <Sysname> system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] command accounting command authorization command authorization undo command authorization User interface view None 27

28 Use the command authorization command to enable command authorization. Use the undo command authorization command to restore the default. By default, command authorization is disabled, that is, logged-in users can execute commands without authorization. With command authorization enabled, users logging in from the current user interface can perform commands authorized by the server. Enable command accounting for VTY 0. Then users logging in through VTY 0 can perform the commands authorized by the HWTACACS server only. <Sysname> system-view [Sysname] user-interface vty 0 [Sysname-ui-vty0] command authorization copyright-info enable copyright-info enable undo copyright-info enable System view None Use the copyright-info enable command to enable the display of copyright information. Use the undo copyright-info enable command to disable the display of copyright information. By default, the display of copyright information is enabled. Enable the display of copyright information <Sysname> system-view [Sysname] copyright-info enable If a user logs in to the device through Telnet, the following information is displayed: ************************************************************************** * Copyright (c) Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * 28

29 ************************************************************************** <Sysname> If a user has already logged in through the console port, and then quits user view, the following information is displayed: ************************************************************************** * Copyright (c) Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * ************************************************************************** User interface con0 is available. Please press ENTER. databits databits { } undo databits User interface view 2: System level 5: Five data bits for each character. 6: Six data bits for each character. 7: Seven data bits for each character. 8: Eight data bits for each character. Use the databits command to set data bits for each character. Use the undo databits command to restore the default. The default data bits for each character is set to eight. NOTE: The command is only applicable to console ports. The data bits setting on the terminal and the device user interface must be the same for communication. 29

30 Set data bits to 5. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] databits 5 display history-command display history-command Any view 1: Monitor level None Use the display history-command command to view up to 256 valid history commands that have been executed recently. Related commands: history-command max-size. Display history commands. (The prompt information depends on the current configuration.) <Sysname> display history-command system-view quit display current-configuration display user-interface display user-interface [ num1 { console vty } num2 ] [ summary ] Any view 1: Monitor level num1: Absolute number of a user interface. The value range is 0 to 5. num2: Relative number of a user interface: For the console port, the value is 0. 30

31 For VTY user interfaces, the value range is 0 to 4. summary: Displays summary about user interfaces. Use the display user-interface command to view information about the specified interface or all user interfaces. If the summary keyword is absent, the command displays the type of the user interface, the absolute or relative number, the speed, the user privilege level, the authentication mode and the physical location. If the summary keyword is present, the command displays the numbers and types of user interfaces. Example 1: Display information about user interface 0. <Sysname> display user-interface 0 Idx Type Tx/Rx Modem Privi Auth Int + 0 CON N - + : Current user-interface is active. F : Current user-interface is active and work in async mode. Idx : Absolute index of user-interface. Type : Type and relative index of user-interface. Privi: The privilege of user-interface. Auth : The authentication mode of user-interface. Int : The physical location of UIs. A : Authentication use AAA. L : Authentication use local database. N : Current UI need not authentication. P : Authentication use current UI's password. Table 1 display user-interface command output description Field + The current user interface is active. F Idx Type Tx/Rx Modem Privi The current user interface is active and works in asynchronous mode. The absolute number of the user interface. The type and relative number of the user interface. The speed of the user interface Whether the modem is allowed to dial in (in), dial out (out), or both (inout) By default, the character - is displayed to indicate that this function is disabled. Indicates the command level of a user under that user interface 31

32 Field Auth Int A L N P The authentication mode for users logging in through the interface using AAA (A), current user interface password (P), local database (L), none authentication (N). The physical location of the user interfaces Uses AAA authentication mode, and the corresponding authentication mode is scheme. Uses local authentication (not supported at present) No authentication is needed, the corresponding authentication mode is none. Authenticates the user using the password of the current user interface, and the corresponding authentication mode is password. Example 2: Display summary about all user interfaces. <Sysname> display user-interface summary User interface type : [CON] 0:U User interface type : [VTY] 1:XXXX X 1 character mode users. (U) 5 UI never used. (X) 1 total UI in use Table 2 display user-interface summary command output description Field User interface type 0:X character mode users. (U) Type of user interface (CON/VTY) 0 represents the absolute number of the user interface. X means this user interface is not used; U means this user interface is in use; the number of the character X and U indicates the total number of user interfaces. Number of mode users, that is, the number of character U. UI never used. total UI in use (X) Number of user interfaces not used, that is, the number of character X. Total number of user interfaces in use display users display users [ all ] 32

33 Any view 1: Monitor level all: Displays information about all user interfaces that the device supports. Use the display users command to display information about the user interfaces being used. Use the display users all command to display the information about all the user interfaces supported on the device. Display the user information of the user interfaces being used. <Sysname> display users The user application information of the user interface(s): Idx UI Delay Type Userlevel + 1 VTY 0 00:00:00 TEL 3 3 VTY 2 00:35:00 TEL 3 Following are more details. VTY 0 : User name: admin Location: VTY 2 : User name: admin Location: : Current operation user. F : Current operation user work in async mode. The above information shows that two users have logged in to the device. One is VTY 0 with the IP address of and the other is VTY 2 with the IP address of Table 3 display users command output description Field Idx UI Delay Type Userlevel Absolute number of the user interface Relative number of the user interface. The first column, VTY for example, represents user interface type, and the second column, 0 for example, represents the relative number of the user interface. Interval since the last input, in the format of hh:mm:ss. User type, such as Telnet User authority or level: 0 for visit, 1 for monitor, 2 for system, and 3 for manage. + Current user Location Location of the user logging from the current user interface 33

34 Field F The current user works in asynchronous mode display web users display web users Any view Parameter None Use the display web users command to display information about web users (see Table 4 Example Display information about the current web users. <Sysname> display web users UserID Name Language Level State LinkCount LoginTime LastTime ab admin Chinese Management Enable 0 20:55:52 20:55:59 ab admin English Management Enable 0 20:57:53 20:57:54 Table 4 display web users command output description Field UserID Name Language Level State LinkCount LoginTime LastTime ID of a web user Name of the web user Login language used by the web user Level of the web user State of the web user Number of tasks that the web user runs Time when the web user logged in Last time when the web user accessed the switch escape-key escape-key { default character } undo escape-key User interface view 34

35 character: Specifies the shortcut key for aborting a task. This is a single character (or its corresponding ASCII code value in the range 0 to 127) or a string of 1 to 3 characters. But in fact, only the first character functions as the shortcut key. For example, if you enter an ASCII code value 113, the system will use its corresponding character q as the shortcut key; if you input the string q@c, the system uses the first letter q as the shortcut key. default: Restores the default escape key combination Ctrl+C. Use the escape-key command to define a shortcut key for terminating tasks. Use the undo escape-key command to disable the shortcut key for aborting tasks. By default, you can use Ctrl+C to terminate a task. After defining a new shortcut key using the escape-key command, the new shortcut key will function to terminate a task. You can use the display current-configuration command to display the shortcut key you have defined. Note that if you set the character argument in a user interface of a device, when you use the user interface to log in to the device and then telnet to another device through the device you have logged in, the character argument can be used as a control character to terminate a task only, rather than input as a common character. For example, if you specify character as e in VTY 0 user interface of Device A, when you log in to the Device A using VTY 0 on PC (Hyper Terminal), you can input e as a common character on PC, and you can also use e to terminate the task running on Device A. If you telnet to Device B through Device A, however, you can only use e to terminate the task running on Device B, rather than input e as a common character. Therefore, you are recommended to specify character as a key combination. Define <a> as the escape key. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] escape-key a To verify the configuration, do the following: # Use the ping command to check the reachability of the device with the IP address of and use the -c argument to specify the number of the ICMP echo packets to be sent as 20. <Sysname> ping -c PING : 56 data bytes, press a to break Reply from : bytes=56 Sequence=1 ttl=255 time=3 ms Reply from : bytes=56 Sequence=2 ttl=255 time=3 ms # Enter <a>, if the task terminates immediately and the system returns to the current view, the configuration is correct ping statistics

36 2 packet(s) transmitted 2 packet(s) received 0.00% packet loss round-trip min/avg/max = 3/3/3 ms <Sysname> free user-interface free user-interface { num1 { console vty } num2 } User view num1: Absolute number of a user interface. The value range is 0 to 5. num2: Relative number of a user interface with the following rules: For the console port, the value is 0. For VTY user interfaces, the value range is 0 to 4. Use the free user-interface command to disconnect with the specified user interface. Note that you cannot use this command to terminate your own connection. Terminate the connection with user interface VTY 1. <Sysname> display users The user application information of the user interface(s): Idx UI Delay Type Userlevel + 1 VTY 0 00:00:00 TEL 3 3 VTY 2 00:35:00 TEL 3 Following are more details. VTY 0 : User name: admin Location: VTY 2 : User name: admin Location: : Current operation user. F : Current operation user work in async mode. // Using the display users command, you can see which users are using the device. <Sysname> free user-interface vty 1 Are you sure to free user-interface vty1? [Y/N]:y <Sysname> 36

37 // To make configurations without interruption from the user using VTY 1, you can release the connection established on VTY 1. free web-users free web-users { all user-id user-id user-name user-name } User view Parameter all: Specifies all Web users. user-id: Web user ID, which is a hexadecimal number of 8 bits. user-name: User name of the Web user, which can contain 1 to 80 characters. Use the free web-users command to disconnect a specified Web user or all Web users by force. Related commands: display web users. Example Force all Web users offline. <Sysname> free web-users all history-command max-size history-command max-size size-value undo history-command max-size User interface view 2: System level size-value: History buffer size in the range 0 to 256. By default, up to ten history commands can be stored. Use the history-command max-size command to set the size of history command buffer of the current user interface. Use the undo history-command max-size command to restore the default. By default, the history buffer can save up to 10 commands. 37

38 The history buffer saves validated history commands individually per user interface and buffers for different user interfaces do not affect each other. You can use the display history-command command to display commands saved in the history buffer. After you terminate the current session, the system automatically removes the commands saved in the corresponding history buffer. Set the size of the history command buffer to 20. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] history-command max-size 20 idle-timeout idle-timeout minutes [ seconds ] undo idle-timeout User interface view 2: System level minutes: Specifies timeout time in minutes, in the range 0 to Default is 10 minutes. seconds: Specifies timeout time in seconds, in the range 0 to 59. Default is to 0 seconds. Use the idle-timeout command to set the idle-timeout timer. When it expires, the user connection is terminated. Use the undo idle-timeout command to restore the default. The default idle-timeout is 10 minutes. NOTE: The system automatically terminates a user s connection if there is no information interaction between the device and the user in the default timeout time. Setting idle-timeout to zero disables the timer and the connection is maintained whether it is idle or not. Set the idle-timeout timer to 1 minute and 30 seconds. <Sysname> system-view 38

39 [Sysname] user-interface console 0 [Sysname-ui-console0] idle-timeout 1 30 lock lock User view None Use the lock command to set a password to prevent unauthorized users from operating under the active user interface. After entering the lock command, you are prompted to input a password (up to 16 characters) and then confirm it by inputting the password again. The password is successfully set only when you input the exact password during the confirmation. After setting the password, you are required to input the password the next time you enter the system. By default, this function is disabled. Lock the active user interface. <Sysname> lock Please input password<1 to 16> to lock current user terminal interface: Password: Again: locked! Password: <Sysname> parity parity { even mark none odd space } undo parity User interface view 39

40 2: System level even: Even parity check. mark: Mark parity check. none: No parity check. odd: Odd parity check. space: Space parity check. Use the parity command to set the parity check. Use the undo parity command to restore the default. By default, no parity check is performed. NOTE: The command is only applicable to console ports. The data bits setting on the terminal and the device user interface must be the same for communication. Perform odd parity check on the console interface. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] parity odd protocol inbound protocol inbound { all ssh telnet } VTY interface view all: Supports all the protocols, including Telnet and SSH. ssh: Supports SSH only. telnet: Supports Telnet only. 40

41 Use the protocol inbound command to enable the current user interface to support one or all protocols. By default, all the protocols are supported. The configuration takes effect next time you log in. CAUTION: By default, the authentication mode of the Telnet protocol is password. Before configuring a user interface to support SSH, set the authentication mode to scheme for the user interface; otherwise, the protocol inbound ssh command fails. For more information, see authentication-mode. Enable VTYs 0 through 4 to support Telnet only. <Sysname> system-view [Sysname] user-interface vty 0 4 [Sysname-ui-vty0-4] authentication-mode scheme [Sysname-ui-vty0-4] protocol inbound Telnet screen-length screen-length screen-length undo screen-length User interface view 2: System level screen-length: Number of lines displayed on the next screen, in the range 0 to 512, with zero meaning to display all information at one time, that is, to disable multiple-screen output. Use the screen-length command to set the number of lines displayed on the next screen. Use the undo screen-length command to restore the default (24 lines). Multiple-screen output is supported on the device. If you press the Space key when information display pauses, the system continues to display information on the next screen page. This command sets the number of lines displayed on the next screen, the displayed number of lines on the terminal, however, is decided by the specifications of the terminal. 41

42 For example, you set the value of screen-length to 40, but the terminal can only display 24 lines. In this case, if you press the Space key when the device outputs 1 to 40 lines of information to the terminal, the current screen displays only the information from line 18 to 40. To view the first 17 lines of information, you need to press Page Up or Page Down. The command sets the number of lines displayed on the next screen, and you can use the screen-length disable command to disable multiple-screen output of the current user interface. For more information about the screen-length disable command, see CLI in the Fundamentals Command Reference. Set the number of lines displayed on the next screen of console user interface to 30. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] screen-length 30 send send { all num1 { console vty } num2 } User view 1: Monitor level all: Sends messages to all user interfaces. num1: Absolute number of a user interface. The value range is from 0 to 5. num2: Relative number of a user interface with the following rules: For the console port, the value is 0. For VTY user interfaces, the value range is from 0 to 4. Use the send command to send messages to the specified user interface(s). Press Ctrl+Z to end message input and press Ctrl+C to remove this operation when inputting messages. Example 1: Send the message hello abc to the console user interface. <Sysname> send console 0 Enter message, end with CTRL+Z or Enter; abort with CTRL+C: hello abc^z Send message? [Y/N]:y <Sysname> 42

43 *** *** ***Message from con0 to con0 *** hello abc <Sysname> Example 2: A user logging in through VTY 0 wants to restart the device. To inform the other users to take corresponding actions (for example, save the current configuration), the system sends the message Note please, I will reboot the system!. Configuration on VTY 0: <Sysname> display users The user application information of the user interface(s): Idx UI Delay Type Userlevel + 1 VTY 0 00:00:00 TEL 3 3 VTY 2 00:35:00 TEL 3 Following are more details. VTY 0 : User name: admin Location: VTY 2 : User name: admin Location: : Current operation user. F : Current operation user work in async mode. // Using the display users command, you can see that which users are using the device. <Sysname> send vty 1 Enter message, end with CTRL+Z or Enter; abort with CTRL+C: Note please, I will reboot the system in 3 minutes!^z Send message? [Y/N]:y // Use the command to send a message to user interface VTY 1, telling the user using the interface about the reboot. If a user logs in from VTY 1, the following message is received on VTY 1 (VTY 1 received a message from VTY 0 when the interface ethernet command is being input in this example.). [Sysname] interface ethernet *** *** ***Message from vty0 to vty1 *** 43

44 Note please, I will reboot the system in 3 minutes! set authentication password set authentication password { cipher simple } password undo set authentication password User interface view cipher: Cipher text password. simple: Plain text password. password: A case sensitive string. If the password format is set to simple, the password argument must be in plain text. If it is set to cipher, password can be either in cipher text or in plain text depending on what has been input. A plain text password can be a string of no more than 16 consecutive characters, , for example. A cipher text password or the encrypted version of the plain text password, comprises 24 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!!. Use the set authentication password command to set a local authentication password. Use the undo set authentication password command to remove the local authentication password. No local authentication password is set by default. When setting a password, you should specify simple to save it in plain text in the configuration file, or specify cipher to save it in cipher text. Whether the password format is plain text or cipher text, you must type in plain text password at authentication. A plain text password easily gets cracked. Therefore, H3C recommends to use cipher text password. Related commands: authentication-mode. Set the local authentication password for the user interface console 0 to hello. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] authentication-mode password [Sysname-ui-console0] set authentication password cipher hello 44

45 After setting the password, you are required to input the password the next time you enter the system. shell shell undo shell User interface view None Use the shell command to enable terminal services on the user interface. Use the undo shell command to disable this function. By default, terminal services are enabled on all user interfaces. There are a few restrictions on using the undo shell command: This command is not supported on the console port. This command cannot be used on the user interface from which you log in. Disable terminal services on the VTYs 0 through 4. <Sysname> system-view [Sysname] user-interface vty 0 4 [Sysname-ui-vty0-4] undo shell % Disable ui-vty0-4, are you sure? [Y/N]:y [Sysname-ui-vty0-4] The following information is displayed when a user logs in on a Telnet terminal: The connection was closed by the remote host! speed (user interface view) speed speed-value undo speed User interface view 45

46 2: System level speed-value: Transmission rate in bps. The transmission rates available with asynchronous serial interfaces: 300 bps 600 bps 1200 bps 2400 bps 4800 bps 9600 bps bps bps bps bps Note that the transmission rate varies with devices and configuration environment. Use the speed command to set the transmission rate on the user interface. Use the undo speed command to restore the default transmission rate. By default, the transmission rate is 9600 bps. NOTE: The command is only applicable to console ports. The data bits setting on the terminal and the device user interface must be the same for communication. Set the transmission rate on the user interface console 0 to bps. <Sysname> system-view [Sysname] user-interface console 0 [Sysname-ui-console0] speed telnet telnet remote-host [ service-port ] [ source { interface interface-type interface-number ip ip-address } ] 46

47 User view 0: Visit level remote-host: IPv4 address or host name of a remote system. This can be a case insensitive string of 1 to 20 characters. service-port: TCP port number for the remote system to provide Telnet services. It ranges from 0 to and defaults to 23. source: Specifies the source interface or source IPv4 address of Telnet packets. interface interface-type interface-number: Specifies the source interface. The source IPv4 address of the Telnet packets sent is the IPv4 address of the specified interface. interface-type interface-number represents the interface type and number. ip ip-address: Specifies the source IPv4 address of Telnet packets. Use the telnet command to telnet a remote host to remotely manage the host. To stop the current Telnet login, press Ctrl+K or use the quit command. The source IPv4 address or source interface specified by this command is applicable to the current Telnet connection only. Telnet the remote host with the IP address , specifying the source IP address of Telnet packets as <Sysname> telnet source ip telnet ipv6 telnet ipv6 remote-host [ -i interface-type interface-number ] [ port-number ] User view 0: Visit level remote-host: IP address or host name of a remote system which can be a case insensitive string of 1 to 46 characters. -i interface-type interface-number: Specifies the outbound interface for sending Telnet packets, where interface-type interface-number represents the interface type and number. You must provide the i interface-type interface-number argument if the destination address is a link-local address. 47