H3C 5820交换机用户分权解决办法

1、基础网络配置：

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]vlan 10

[H3C-vlan10]quit

[H3C]int vlan 10

[H3C-Vlan-interface10]ip address 192.168.124.254 24

[H3C-Vlan-interface10]quit

[H3C]int gi 1/0/1

[H3C-GigabitEthernet1/0/1]port link-type access

[H3C-GigabitEthernet1/0/1]port access vlan 10

[H3C-GigabitEthernet1/0/1]quit

2、创建管理员账号，并赋予最高权限，仅允许SSH登录

[H3C]local-user admin

New local user added.

[H3C-luser-manage-admin]password simple admin

[H3C-luser-manage-admin]service-type ssh

[H3C-luser-manage-admin]authorization-attribute user-role network-admin

[H3C-luser-manage-admin]quit

3、创建访客账号，赋予1级权限，仅允许SSH登录

[H3C]local-user user

New local user added.

[H3C-luser-manage-user]password simple 123456

[H3C-luser-manage-user]service-type ssh

[H3C-luser-manage-user]authorization-attribute user-role level-1

[H3C-luser-manage-user]quit

4、开启SSH功能

[H3C]ssh server enable

5、在VTY调用本地用户登录

[H3C]line vty 0 4

[H3C-line-vty0-4]authentication-mode scheme

[H3C-line-vty0-4]protocol inbound ssh

[H3C-line-vty0-4]quit

6、设置电脑IP，并PING通交换机

7、使用管理员登录账号，且能进行配置

8、使用访客账号登录交换机，无法对交换机进行配置