命令降级
<Sysname> system-view
[Sysname] command-privilege level 0 view shell int
设置用户级别的认证方式
<Sysname> system-view
[Sysname] user-interface vty 0
[Sysname] super authentication-mode super-password
设置用户级别切换密码
<Sysname> system-view
[Sysname] super password 级别 cipher|simple 密码
用户级别切换
<Sysname> super 级别
配置使用户通过Telnet方式管理交换机
<Sysname> system-view
[Sysname] super password level 3 simple 123
HWTACACS认证方式配置举例
端口隔离
<Sysname> system-view
[Sysname] int e1/0/2
[Sysname-Ethernet1/0/2] port isolate
[Sysname-Ethernet1/0/2] quit
<Sysname> display isolate port 显示隔离组中的端口信息
端口绑定
<Sysname> system-view
[Sysname] port-security enable 开启端口安全
[Sysname] int e1/0/2
[Sysname-Ethernet1/0/2] port-security max-mac-count 数量 限制端口接入的MAC最大数量
Security MAC
<Sysname> system-view
[Sysname] port-security enable
[Sysname] int e1/0/1
[Sysname- Ethernet1/0/1] port-security max-mac-count 80
[Sysname- Ethernet1/0/1] port-security port-mode autolearn
[Sysname- Ethernet1/0/1] mac-address security 0001-0002-0003 vlan 1 先绑定一个并添加到VLAN1
设置Intrusion Portection特性被触发后,该端口将暂时被关闭30秒
[Sysname- Ethernet1/0/1] port-security intrusion-mode disableport-temporarily
[Sysname- Ethernet1/0/1] quit
[Sysname] port-security timer disableport 30
端口绑定
<Sysname> system-view
[Sysname] interface e1/0/1
[Sysname- Ethernet1/0/1] am user-bind mac-address 0001-0002-0003 ip-address 10.1.1.1