Table of Contents 1 Basic Configuration Commands 1-1

Table of Contents 1 Basic Configuration Commands 1-1 Basic Configuration Commands 1-1 clock datetime 1-1 clock summer-time one-off 1-1 clock summer-time repeating 1-2 clock timezone 1-4 command-privilege level 1-5 display clipboard 1-6 display clock 1-7 display current-configuration 1-7 display diagnostic-information 1-9 display history-command 1-10 display hotkey 1-10 display this 1-12 display version 1-13 header 1-14 hotkey 1-16 quit 1-17 return 1-18 screen-length disable 1-18 super 1-19 super password 1-20 sysname 1-21 system-view 1-22 i

1 Basic Configuration Commands Basic Configuration Commands clock datetime clock datetime time date User view 3: Manage level time: Time in the format of HH:MM:SS, where HH is hours in the range 0 to 23, MM is minutes in the range 0 to 59, and SS is seconds in the range 0 to 59. The zeros in the argument can be omitted except for indicating 0 hours. date: Date in the format of MM/DD/YYYY or YYYY/MM/DD. MM is the month of the year in the range 1 to 12, DD is the day of the month that varies with months, and YYYY is a year in the range 2000 to 2035. Use the clock datetime command to set the current time and date of the device. The current time and date of the device must be set in an environment that requires the acquisition of absolute time. You may choose not to provide seconds when inputting the time parameters. Related commands: clock summer-time one-off, clock summer-time repeating, clock timezone, display clock. # Set the current system time to 14:10:20 08/01/2005. <Sysname> clock datetime 14:10:20 8/1/2005 # Set the current system time to 00:06:00 01/01/2007. <Sysname> clock datetime 0:6 2007/1/1 clock summer-time one-off clock summer-time zone-name one-off start-time start-date end-time end-date add-time undo clock summer-time 1-1

System view 3: Manage level zone-name: Name of the daylight saving time, a string of 1 to 32 characters. It is case sensitive. start-time: Start time, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. start-date: Start date, in the format of MM/DD/YYYY (months/days/years) or YYYY/MM/DD. end-time: End time, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. end-date: End date, in the format of MM/DD/YYYY (months/days/years) or YYYY/MM/DD. add-time: Time added to the standard time of the device, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. Use the clock summer-time one-off command to adopt daylight saving time from the start-time of the start-date to the end-time of the end-date. Daylight saving time adds the add-time to the current time of the device. Use the undo clock summer-time command to cancel the configuration of the daylight saving time. After the configuration takes effect, you can use the display clock command to view it. Besides, the time of the log or debug information is the local time of which the time zone and daylight saving time have been adjusted. Note that: The time range from start-time in start-date to end-time in end-date must be longer than one day and shorter than one year. Otherwise, the argument is considered as invalid and the configuration fails. If the current system time is in the time range specified with this command, the system time automatically adds add-time after the execution of this command. Related commands: clock datetime, clock summer-time repeating, clock timezone, display clock. # For daylight saving time in abc1 between 06:00:00 on 08/01/2006 and 06:00:00 on 09/01/2006, set the system clock ahead one hour. [Sysname] clock summer-time abc1 one-off 6 08/01/2006 6 09/01/2006 1 clock summer-time repeating clock summer-time zone-name repeating start-time start-date end-time end-date add-time undo clock summer-time 1-2

System view 3: Manage level zone-name: Name of the daylight saving time, a string of 1 to 32 characters. start-time: Start time, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. start-date: Start date which can be set in two ways: Enter the year, month and date at one time, in the format of MM/DD/YYYY (months/days/years) or YYYY/MM/DD. Enter the year, month and date one by one, separated by spaces. The year ranges from 2000 to 2035; the month can be January, February, March, April, May, June, July, August, September, October, November or December; the start week can be the first, second, third, fourth, fifth or last week of the month; the start date is Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday. end-time: End time, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. end-date: End date which can be set in two ways: Enter the year, month and date at one time, in the format of MM/DD/YYYY (months/days/years) or YYYY/MM/DD. Enter the year, month and date one by one, separated by spaces. The year ranges from 2000 to 2035; the month can be January, February, March, April, May, June, July, August, September, October, November or December; the end week can be the first, second, third, fourth, fifth or last week of the month; the end date is Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday. add-time: Time added to the current standard time of the device, in the format of HH:MM:SS (hours/minutes/seconds). The zeros in the argument can be omitted except for indicating 0 hours. Use the clock summer-time repeating command to adopt summer-time repeatedly. Use the undo clock summer-time command to cancel the configuration of the daylight saving time. For example, when start-date and start-time are set to 2007/6/6 and 00:00:00, end-date and end-time to 2007/10/01 and 00:00:00, and add-time to 01:00:00, it specifies to adopt daylight saving time from 00:00:00 of June 6 until 00:00:00 of October 1 each year from 2007 (2007 inclusive). The daylight saving time adds one hour to the current device time. After the configuration takes effect, use the display clock command to view the result. The information such as log file and debug adopts the local time modified by time-zone and daylight saving time. Note that: The time range from start-time in start-date to end-time in end-date must be longer than one day and shorter than one year. Otherwise, the argument is considered as invalid and the configuration fails. 1-3

If the current system time is in the time range specified with this command, the system time automatically adds add-time after the execution of this command. Related commands: clock datetime, clock summer-time one-off, clock timezone, display clock. # For the daylight saving time in abc2 between 06:00:00 on 08/01/2007 and 06:00:00 on 09/01/2007 and from 06:00:00 08/01 to 06:00:00 on 09/01 each year after 2007, set the system clock ahead one hour. [Sysname] clock summer-time abc2 repeating 06:00:00 08/01/2007 06:00:00 09/01/2007 01:00:00 clock timezone clock timezone zone-name { add minus } zone-offset undo clock timezone System view 3: Manage level zone-name: Time zone name, a string of 1 to 32 characters. It is case sensitive. add: Positive to universal time coordinated (UTC) time. minus: Negative to UTC time. zone-offset: Offset to the UTC time in the format of HH/MM/SS (hours/minutes/seconds), where HH is hours in the range 0 to 23, MM is minutes in the range 0 to 59, and SS is seconds in the range 0 to 59. The zeros in the argument can be omitted except for indicating 0 hours. Use the clock timezone command to set the local time zone. Use the undo clock timezone command to restore the local time zone to the default UTC time zone. By default, the local time zone is UTC zone. After the configuration takes effect, use the display clock command to view the result. The information such as log file and debug adopts the local time modified by time-zone and daylight saving time. Related commands: clock datetime, clock summer-time one-off, clock summer-time repeating, display clock. # Set the name of the local time zone to Z5, five hours ahead of UTC time. [Sysname] clock timezone z5 add 5 1-4

command-privilege level command-privilege level level view view command undo command-privilege view view command System view 3: Manage level level level: Command level, in the range 0 to 3. view view: Specifies a view. The value shell of the argument view represents user view. The specified view must be the view to which the command provided by the command argument belongs; for the corresponding view, refer to the "" section of the specified command. command: Command to be set in the specified view. Use the command-privilege command to assign a level for the specified command in the specified view. Use the undo command-privilege view command to restore the default. By default, each command in a view has its specified level. For the details, refer to section Configuring User Privilege Levels and Command Levels in the operation manual. Command level falls into four levels: visit, monitor, system, and manage, which are identified by 0 through 3. The administrator can assign a privilege level for a user according to his need. When the user logs on a device, the commands available depend on the user s privilege. For example, if a user s privilege is 3 and the command privilege of VTY 0 user interface is 1, and the user logs on the system from VTY 0, he can use all the commands with privilege smaller than three (inclusive). Note that: You are recommended to use the default command level or modify the command level under the guidance of professional staff; otherwise, the change of command level may bring inconvenience to your maintenance and operation, or even potential security problem. When you configure the command-privilege command, the value of the command argument must be a complete form of the specified command, that is, you must enter all needed keywords and arguments of the command. The argument should be in the value range. For example, the default level of the tftp server-address { get put sget } source-filename [ destination-filename ] [ source { interface interface-type interface-number ip source-ip-address } ] command is 3; after the command-privilege level 0 view shell tftp 1.1.1.1 put a.cfg command is executed, when users with the user privilege level of 0 log in to the device, they can execute the tftp server-address put source-filename command (such as the tftp 192.168.1.26 put syslog.txt command); users with the user privilege level of 0 cannot execute the command with the get, sget or source keyword, and cannot specify the destination-filename argument. 1-5

When you configure the undo command-privilege view command, the value of the command argument can be an abbreviated form of the specified command, that is, you only need to enter the keywords at the beginning of the command. For example, after the undo command-privilege view system ftp command is executed, all commands starting with the keyword ftp (such as ftp server acl, ftp server enable, and ftp timeout) will be restored to the default level; if you have modified the command level of commands ftp server enable and ftp timeout, and you want to restore only the ftp server enable command to its default level, you should use the undo command-privilege view system ftp server command. If you modify the command level of a command in a specified view from the default command level to a lower level, remember to modify the command levels of the quit command and the corresponding command that is used to enter this view. For example, the default command level of commands interface and system-view is 2 (system level); if you want to make the interface command available to the users with the user privilege level of 1, you need to execute the following three commands: command-privilege level 1 view shell system-view, command-privilege level 1 view system interface ethernet 2/0/1, and command-privilege level 1 view system quit, so that the login users with the user privilege level of 1 can enter system view, execute the interface ethernet command, and then return to user view. # Set the command level of the interface command to 0 in system view. [Sysname] command-privilege level 0 view system interface display clipboard display clipboard Any view 1: Monitor level None Use the display clipboard command to view the contents of the clipboard. To copy the specified content to the clipboard: Move the cursor to the starting position of the content and press the <Esc+Shift+,> combination (, is an English comma). Move the cursor to the ending position of the content and press the <Esc+Shift+.> combination (. is an English dot) to copy the specified content to the clipboard. # the content of the clipboard. 1-6

<Sysname> display clipboard ---------------- CLIPBOARD----------------- telnet server enable display clock display clock Any view 1: Monitor level None Use the display clock command to view the current system time and date. The current system time and date are decided by the clock datetime, clock summer-time one-off (or clock summer-time repeating), clock timezone. Refer to Configuring the system clock in the operation manual for the detailed rules. Related commands: clock datetime, clock summer-time one-off, clock summer-time repeating, clock timezone. # Display the current time and date. <Sysname> display clock 09:41:23 UTC Thu 12/15/2005 display current-configuration display current-configuration [ [ configuration [ configuration ] interface [ interface-type ] [ interface-number ] ] [ by-linenum ] [ { begin exclude include } regular-expression ] ] Any view 2: System level configuration [ configuration ]: Specifies to display non-interface configuration. If no parameter is used, all the non-interface configuration is displayed; if parameters are used, display the specified information. For example: 1-7

isis: Displays the isis configuration. isp: Displays the ISP configuration. post-system: Displays the post-system configuration. radius-template: Displays the Radius template configuration. system: Displays the system configuration. user-interface: Displays the user interface configuration. interface [ interface-type ] [ interface-number ]: Displays the interface configuration, where interface-type represents the interface type and interface-number represents the interface number. by-linenum: Specifies to display the number of each line. : Specifies to use regular expression to filter the configuration of display device. For the detailed description of the regular expression, refer to the CLI Display part of Basic System Configuration in the System Volume. begin: Displays the line that matches the regular expression and all the subsequent lines. exclude: Displays the lines that do not match the regular expression. include: Displays only the lines that match the regular expression. regular-expression: Regular expression, a string of 1 to 256 characters. Note that this argument is case-sensitive and can have spaces included. Use the display current-configuration command to display the current validated configuration of a device. You can use the display current-configuration command to view the currently validated configuration. A parameter is not displayed if it has the default configuration. If the validated parameter is changed, although you have configured it, the validated parameter is displayed. For example, ip address 11.11.11.11 24 has been configured on a Loopback interface. In this case, if you execute the display current-configuration command, ip address 11.11.11.11 255.255.255.255 is displayed, meaning the validated subnet mask is 32 bits. Related commands: save, reset saved-configuration, display saved-configuration. # Display the configuration of VLAN-interface 1 of the current device (the output information depends on the device model and the current configuration). <Sysname> display current-configuration interface vlan-interface 1 # interface Vlan-interface1 ip address 192.168.0.72 255.255.255.0 igmp group-policy 2000 igmp static-group 224.1.1.1 source 1.1.1.1 multicast boundary 224.5.5.0 24 multicast boundary 224.1.1.0 24 ntp-service multicast-server ntp-service multicast-server 224.0.1.0 ntp-service multicast-server 224.0.1.2 # return 1-8

# Display the configuration from the line containing user-interface to the last line in the current validated configuration (the output information depends on the device model and the current configuration). <Sysname> display current-configuration begin user-interface user-interface aux 0 user-interface vty 0 4 authentication-mode none user privilege level 3 # return display diagnostic-information display diagnostic-information Any view 1: Monitor level None Use the display diagnostic-information command to display or save the statistics of each module s running status in the system. When the system is out of order, you need to collect a lot of information to locate the problem. At this time you can use the display diagnostic-information command to display or save the statistics of each module s running status in the system. The display diagnostic-information command collects prompt information of the commands display clock, display version, display device, and display current-configuration. # Save the statistics of each module's running status in the system. <Sysname> display diagnostic-information Save or display diagnostic information (Y=save, N=display)?[Y/N]y Please input the file name(*.diag)[flash:/default.diag]:aa.diag Diagnostic information is outputting to flash:/aa.diag. Please wait... Save succeeded. You can view the content of the file aa.diag by executing the more.aa.diag command in user view, in combination of the <Page Up> and <Page Down> keys. # Display the statistics of each module's running status in the system. <Sysname> display diagnostic-information 1-9

Save or display diagnostic information (Y=save, N=display)? [Y/N]:n display history-command display history-command Any view 1: Monitor level None Use the display history-command command to display commands saved in the history buffer. The system will save validated history commands performed last in current user view to the history buffer, which can save up to ten commands by default. You can use the history-command max-size command to set the size of the history buffer. Refer to the history-command max-size command in User Interface Commands in the System Volume for related configuration. # Display validated history commands in current user view (the display information varies with configuration). <Sysname> display history-command display history-command system-view vlan 2 quit display hotkey display hotkey Any view 1: Monitor level None 1-10

Use the display hotkey command to display hotkey information. # Display hotkey information. <Sysname> display hotkey ----------------- HOTKEY ----------------- =Defined hotkeys= Hotkeys Command CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debug all =Undefined hotkeys= Hotkeys Command CTRL_T NULL CTRL_U NULL =System hotkeys= Hotkeys Function CTRL_A Move the cursor to the beginning of the current line. CTRL_B Move the cursor one character left. CTRL_C Stop current command function. CTRL_D Erase current character. CTRL_E Move the cursor to the end of the current line. CTRL_F Move the cursor one character right. CTRL_H Erase the character left of the cursor. CTRL_K Kill outgoing connection. CTRL_N Display the next command from the history buffer. CTRL_P Display the previous command from the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word left of the cursor. CTRL_X Delete all characters up to the cursor. CTRL_Y Delete all characters after the cursor. CTRL_Z Return to the User. CTRL_] Kill incoming connection or redirect connection. ESC_B Move the cursor one word back. ESC_D Delete remainder of word. ESC_F Move the cursor forward one word. ESC_N Move the cursor down a line. ESC_P Move the cursor up a line. ESC_< Specify the beginning of clipboard. ESC_> Specify the end of clipboard. 1-11

display this display this [ by-linenum ] Any view 1: Monitor level by-linenum: Specifies to display the number of each line. Use the display this command to display the validated configuration under the current view. After finishing a set of configurations under a view, you can use the display this command to check whether the configuration takes effect. Note that: A parameter is not displayed if it has the default configuration. A parameter is not displayed if the configuration has not taken effect. When you use the command in a user interface view, the command displays the valid configuration in all the user interfaces. When you execute the command in any VLAN view, the command displays configuration of all the VLANs. # Display the valid configuration information of the current view (the output information depends on the current configuration of the device). [Sysname] user-interface vty 0 [Sysname-ui-vty0] display this # user-interface aux 0 user-interface vty 0 history-command max-size 256 user-interface vty 1 4 # return # Display the valid configuration information on interface Ethernet 2/0/1 (the output information depends on the current configuration of the device). [Sysname] interface ethernet 2/0/1 [Sysname-Ethernet2/0/1] display this # interface Ethernet2/0/1 1-12

port link-type hybrid port hybrid vlan 1 tagged port hybrid pvid vlan 3 # return display version display version Any view 1: Monitor level None Use the display version command to view system version information. By viewing system version information, you can learn about the current software version, rack type and the information related to the main control board and interface boards. # Display system version information (The system version information varies with devices.). <Sysname> display version H3C Comware Platform Software Comware Software, Version 5.20, Release 0000 Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved. H3C S7503E uptime is 0 week, 0 day, 7 hours, 34 minutes MPU(M) 0: Uptime is 0 weeks,0 days,7 hours,34 minutes H3C S7503E MPU(M) with 1 BCM1125H Processor DRAM: 512M bytes FLASH: 64M bytes NVRAM: 512K bytes PCB 1 Version: VER.B PCB 2 Version: VER.B Bootrom Version: 206 CPLD 1 Version: 002 CPLD 2 Version: 002 Release Version: H3C S7503E-0000 Patch Version : None 1-13

Slot 1 Without Board LPU 2: Uptime is 0 weeks,0 days,7 hours,32 minutes H3C S7503E LPU with 1 BCM1122H Processor DRAM: 256M bytes FLASH: 0M bytes NVRAM: 0K bytes PCB 1 Version: VER.A PCB 2 Version: VER.A Bootrom Version: 201 CPLD 1 Version: 001 CPLD 2 Version: 001 Release Version: H3C S7503E-0000 Patch Version : None LPU 3: Uptime is 0 weeks,0 days,7 hours,32 minutes H3C S7503E LPU with 1 BCM1122H Processor DRAM: 256M bytes FLASH: 0M bytes NVRAM: 0K bytes PCB 1 Version: VER.C Bootrom Version: 205 CPLD 1 Version: 004 Release Version: H3C S7503E-0000 Patch Version : None Slot 4 Without Board header header { incoming legal login motd shell } text undo header { incoming legal login motd shell } System view 2: System level incoming: Sets the banner displayed when a Modem login user enters user view. If authentication is needed, the incoming banner is displayed after the authentication is passed. legal: Sets the authorization banner before a user logs onto the terminal interface. The legal banner is displayed before the user inputs the username and password. login: Sets the login banner at authentication. 1-14

motd: Banner displayed before login. If authentication is required, the banner is displayed before authentication. shell: Sets the banner displayed when a non Modem login user enters user view. text: Banner message, which can be input in two formats. Refer to Basic System Configuration for the detailed information. Use the header command to create a banner. Use the undo header command to clear a banner. # Configure banners. [Sysname] header incoming % Input banner text, and quit with the character '%'. Welcome to incoming(header incoming)% [Sysname] header legal % Input banner text, and quit with the character '%'. Welcome to legal (header legal)% [Sysname] header login % Input banner text, and quit with the character '%'. Welcome to login(header login)% [Sysname] header motd % Input banner text, and quit with the character '%'. Welcome to motd(header motd)% [Sysname] header shell % Input banner text, and quit with the character '%'. Welcome to shell(header shell)% The character % is the starting/ending character of text in this example. Entering % after the displayed text quits the header command. As the starting and ending character, % is not a part of a banner. # Test the configuration remotely using Telnet. (only when login authentication is configured can the login banner be displayed). **************************************************************************** * Copyright (c) 2004-2009 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * * no decompiling or reverse-engineering shall be allowed. * **************************************************************************** 1-15

Welcome to legal (header legal) Press Y or ENTER to continue, N to exit. Welcome to motd(header motd) Welcome to shell(header shell) <Sysname> hotkey hotkey { CTRL_G CTRL_L CTRL_O CTRL_T CTRL_U } command undo hotkey { CTRL_G CTRL_L CTRL_O CTRL_T CTRL_U } System view 2: System level CTRL_G: Assigns the hot key <Ctrl+G> to a command. CTRL_L: Assigns the hot key <Ctrl+L> to a command. CTRL_O: Assigns the hot key <Ctrl+O> to a command. CTRL_T: Assigns the hot key <Ctrl+T> to a command. CTRL_U: Assigns the hot key <Ctrl+U> to a command. command: The command line associated with the hot key. Use the hotkey command to assign a hot key to a command line. Use the undo hotkey command to restore the default. By default, the system specifies corresponding commands for <Ctrl+G>, <Ctrl+L> and <Ctrl+O>, while the others are null. <Ctrl+G> corresponds to display current-configuration <Ctrl+L> corresponds to display ip routing-table <Ctrl+O> corresponds to undo debugging all You can customize this scheme as needed however. # Assign the hot key <Ctrl+T> to the display tcp status command. [Sysname] hotkey ctrl_t display tcp status # Display the configuration of hotkeys. [Sysname] display hotkey 1-16

----------------- HOTKEY ----------------- =Defined hotkeys= Hotkeys Command CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debug all CTRL_T display tcp status =Undefined hotkeys= Hotkeys Command CTRL_U NULL =System hotkeys= Hotkeys Function CTRL_A Move the cursor to the beginning of the current line. CTRL_B Move the cursor one character left. CTRL_C Stop current command function. CTRL_D Erase current character. CTRL_E Move the cursor to the end of the current line. CTRL_F Move the cursor one character right. CTRL_H Erase the character left of the cursor. CTRL_K Kill outgoing connection. CTRL_N Display the next command from the history buffer. CTRL_P Display the previous command from the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word left of the cursor. CTRL_X Delete all characters up to the cursor. CTRL_Y Delete all characters after the cursor. CTRL_Z Return to the user view. CTRL_] Kill incoming connection or redirect connection. ESC_B Move the cursor one word back. ESC_D Delete remainder of word. ESC_F Move the cursor forward one word. ESC_N Move the cursor down a line. ESC_P Move the cursor up a line. ESC_< Specify the beginning of clipboard. ESC_> Specify the end of clipboard. quit quit Any view 1-17

0: Visit level (in user view) 2: System level (in other views) None Use the quit command to exit to a lower-level view. If the current view is user view, the quit command terminates the current connection and exit the device. # Switch from Ethernet 2/0/1 interface view to system view, and then to user view. [Sysname-Ethernet2/0/1] quit [Sysname] quit <Sysname> return return Any view except user view 2: System level None Use the return command to return to user view from current view, as you do with the hot key Ctrl+Z. Related commands: quit. # Return to user view from Ethernet2/0/1 view. [Sysname-Ethernet2/0/1] return <Sysname> screen-length disable screen-length disable undo screen-length disable 1-18

User view 1: Monitor level None Use the screen-length disable command to disable the multiple-screen output function of the current user. Use the undo screen-length disable command to enable the multiple-screen output function of the current user. By default, a login user uses the settings of the screen-length command. The default settings of the screen-length command are: multiple-screen output is enabled and 24 lines are displayed on the next screen. (For the details of the screen-length command, refer to User Interface Commands in the System Volume.) Note that this command is applicable to the current user only and when a user re-logs in, the settings restore to the system default. # Disable multiple-screen output of the current user. <Sysname> screen-length disable super super [ level ] User view 0: Visit level level: User level, in the range 0 to 3, and defaults to 3. Use the super command to switch from the current user privilege level to a specified user privilege level. If you do not provide the level argument, the current user privilege level will be switched to 3. Login users are classified into four levels that correspond to the four command levels. After users at different levels log in, they can only use commands at their own, or lower, levels. 1-19

Users can switch to a lower user privilege level unconditionally. However, no password is needed only for AUX login user level switching; to switch to a higher user privilege level, and log in from VTY user interfaces, users need to enter the password needed for the security s sake. If the entered password is incorrect or no password is configured, the switching fails. Therefore, before switching a user to a higher user privilege level, you should configure the password needed. Related commands: super password. # Set the user privilege level to 2 (The current user privilege level is 3.). <Sysname> super 2 User privilege level is 2, and only those commands can be used whose level is equal or less than this. Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE # Switch the user privilege level back to 3 (Suppose password 123 has been set; otherwise, the user privilege level cannot be switched to 3.). <Sysname> super 3 Password: User privilege level is 3, and only those commands can be used whose level is equal or less than this. Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE super password super password [ level user-level ] { simple cipher } password undo super password [ level user-level ] System view 2: System level level user-level: User privilege level in the range 1 to 3, with the default as 3. simple: Plain text password. cipher: Cipher text password. password: Password, a string of characters. It is case-sensitive. For simple password, it is a string of 1 to 16 characters. For cipher password, it is a string of 1 to 16 characters in plain text or 24 characters in cipher text. For example, the simple text 1234567 corresponds to the cipher text (TT8F]Y\5SQ=^Q`MAF4<1!!. 1-20

Use the super password command to set the password needed to switch from a lower user privilege level to a higher one. Use the undo super password command to restore the default. By default, no password is set to switch from a lower user privilege level to a higher one. Note that: If simple is specified, the configuration file saves a simple password. If cipher is specified, the configuration file saves a cipher password. The user must always enter a simple password, no matter simple or cipher is specified. Cipher passwords are recommended, as simple ones are easily getting cracked. # Set the password to abc in simple form for switching user-level to 3. [Sysname] super password level 3 simple abc Display the password for switching user-level. [Sysname] display current-configuration # super password level 3 simple abc # Set the password to abc in cipher form for switching user-level to 3. [Sysname] super password level 3 cipher abc Display the password for switching user-level. [Sysname] display current-configuration # super password level 3 cipher =`*Y=F>*.%-a_SW8\MYM2A!! sysname sysname sysname undo sysname System view 2: System level sysname: Name of the device, a string of 1 to 30 characters. Use the sysname command to set the name of the device. 1-21

Use the undo sysname demand to restore the device name to the default. The default name is H3C. Modifying device name affects the prompt of the CLI. For example, if the device name is Sysname, the prompt of user view is <Sysname>. # Set the name of the device to R2000. [Sysname] sysname R2000 [R2000] system-view system-view User view 2: System level None Use the system-view command to enter system view from the current user view. Related commands: quit, return. # Enter system view from the current user view. System : return to User with Ctrl+Z. [Sysname] 1-22