本来WEB都不能正常登录的,调整了domain才能正常登录(以下命令),请问是不是那里还没有调整到位?
domain
system
authentication default none
authorization default none
accounting default none
用户等级已经设定好了。
[H3C]local-user admin
[H3C-luser-admin]password simple admin
[H3C-luser-admin]authorization-attribute level 3
配置如下:
<TJTJ-MA-WLAN-SW01-H3CWQQZF>DIS CUR
#
version 5.20, Release 6710P01
#
sysname TJTJ-MA-WLAN-SW01-H3CWQQZF
#
super password level 3 cipher $c$3$1ShEYcQ9b9zN+NYB4GpHj1EibVbVRz+kDp5KwZcHeik=
#
domain default enable system
#
telnet server enable
#
ip http enable
#
switch-mode standard
switch-mode normal slot 2
#
switch-mode route-normal
#
password-recovery enable
#
vlan 1
#
vlan 1033
#
vlan 2033
#
domain system
authentication default none
authorization default none
accounting default none
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$rYUFVizViBAz8gclt79bBPlP71l5Jb7m
authorization-attribute level 3
authorization-attribute user-role security-audit
service-type telnet
local-user admin1
password cipher $c$3$Rhqv/xPr0owGjzgj8IDu85Dxb3+X4pIt
authorization-attribute user-role security-audit
local-user h3c
password cipher $c$3$n7JcWeSkbd04zPQ9YYitxKU3m+WVjM+z94jFOxNk
service-type ssh telnet
#
interface NULL0
#
interface Vlan-interface1
#
interface Vlan-interface1033
ip address 172.21.96.58 255.255.255.0
#
interface GigabitEthernet2/0/1
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/2
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/3
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/4
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/5
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/6
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/7
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/8
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/9
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 2 to 4094
#
interface GigabitEthernet2/0/10
port link-mode bridge
#
interface GigabitEthernet2/0/11
port link-mode bridge
#
interface GigabitEthernet2/0/12
port link-mode bridge
#
interface GigabitEthernet2/0/13
port link-mode bridge
#
interface GigabitEthernet2/0/14
port link-mode bridge
#
interface GigabitEthernet2/0/15
port link-mode bridge
#
interface GigabitEthernet2/0/16
port link-mode bridge
#
interface GigabitEthernet2/0/17
port link-mode bridge
#
interface GigabitEthernet2/0/18
port link-mode bridge
#
interface GigabitEthernet2/0/19
port link-mode bridge
#
interface GigabitEthernet2/0/20
port link-mode bridge
#
interface GigabitEthernet2/0/21
port link-mode bridge
#
interface GigabitEthernet2/0/22
port link-mode bridge
#
interface GigabitEthernet2/0/23
port link-mode bridge
#
interface GigabitEthernet2/0/24
port link-mode bridge
#
interface GigabitEthernet2/0/25
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/26
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/27
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/28
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/29
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/30
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/31
port link-mode bridge
shutdown
#
interface GigabitEthernet2/0/32
port link-mode bridge
shutdown
#
interface M-Ethernet0/0/0
ip address 192.168.100.100 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 172.21.96.1
#
snmp-agent
snmp-agent local-engineid 800063A2033822D6D41E63
snmp-agent community read TJ_wlan2012#
snmp-agent community write TJ_wlan2013#
snmp-agent sys-info version v2c v3
snmp-agent target-host trap address udp-domain 211.103.81.141 params securityna
me security v2c
#
ssh server enable
ssh user h3c service-type stelnet authentication-type password
#
ip https enable
#
load xml-configuration
#
load tr069-configuration
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
user-interface vty 5 15
#
return
(0)
最佳答案
级别不够
[H3C]local-user admin class manage
[H3C-luser-manage-admin] password simple admin
[H3C-luser-manage-admin] authorization-attribute user-role network-admin
(0)
这个是V7的命令吧,不能用啊
V5平台设备配置web管理用户部分
[H3C]local-user admin
[H3C-luser-admin]password simple admin
[H3C-luser-admin]authorization-attribute level 3
[H3C-luser-admin]service-type web
另外根据你截图和描述应该是你吧admin账号设置成了安全审计员导致
把以下配置删除
authorization-attribute user-role security-audit
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
那应该是: local-user abc password simple 123456 service-type web authorization-attribute level 3