HP 5120 (JE067A) remote access via web and cli

[Duncan Phillips]

Does anyone know the commands to allow remote access via the web interface & the cli on the HP 5120?

[Emil_G]

How to enable webaccess on H3C Switches.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-VLAN-interface1] ip address 192.168.0.58 255.255.255.0

[Sysname-VLAN-interface1] quit

# Create a local user named admin, and set the password to admin for the user. Specify the telnet service

type for the local user, and set the command level to 3 for this user.

[Sysname] local-user admin

[Sysname-luser-admin] service-type telnet 

[Sysname-luser-admin] authorization-attribute level 3

[Sysname-luser-admin] password simple admin

 [Sysname]ip http enable

[Emil_G]

Telnet login configuration example

# Enter system view.

<H3C> system-view

# Enable the telnet service.

[H3C] telnet server enable

# Create VLAN-interface 1.

[H3C] interface vlan-interface 1

# Assign an IP address to VLAN-interface 1 according to the IP network segment distribution and usage in the current network. 192.168.0.72 is used as an example.

[H3C-Vlan-interface1] ip address 192.168.0.72 24

[H3C-Vlan-interface1] quit

# Enter the view of VTY user interfaces 0 through 4.

[H3C] user-interface vty 0 4

[H3C-ui-vty0-4]

# Configure the authentication method for the VTY user interfaces as needed.

Omitted. For more information, see Login Configuration.

# Configure the command level available to the users that log in through VTY user interfaces 0 through 4. Command level 3 is used as an example, which means that the users can use all commands.

[H3C-ui-vty0-4]user privilege level 3

            [H3C-ui-vty0-4]set authentication password simple password

Note: Some tasks overlapp with the web access configuration.

[Duncan Phillips]

Thanks Emil,

I nearly had it but a misplaced - was throwing me.

Is there a way to set up multiple users via telnet? On previous switches we had admin, manager & monitor with different levels of access but I'm only prompted for the password via telnet whereas I'm prompted for a username & password via the web interface.

# configure console login (works but no username)
user-interface aux 0
authentication-mode password
set authentication password cipher password1
authorization-attribute level 3
service-type-terminal

# configure telnet login (works but no username)
telnet server enable
user-interface vty 0 4
authentication-mode password
set authentication password cipher password1
user privilege level 3

# configure web login (working)
ip http enable

local-user admin
service-type telnet
authorization-attribute level 3
password cipher password1

local-user manager
service-type telnet
authorization-attribute level 3
password cipher password2

local-user monitor
service-type telnet
authorization-attribute level 1
password cipher password3

[Emil_G]

Hi Duncan.

I think your questions are answered in this quide. Chapter "Logging in through Telnet" page 37 to 47

https://techlibrary.hpe.com/device_help/H3C-Manuals/5120/5120-Configuration-Guide(R2215).pdf

To have user-name and password you have to set the authentication mode to scheme.

scheme

—Requires username and password authentication at the next login through Telnet.

Authentication falls into local authentication and remote authentication. To use local authentication,

configure a local user and related parameters. To use remote authentication, configure the username

and password on the remote authentication server.

By the way I am also not quite familiar with this devices. Just happened to have the example configs for initial login.

[Note: broken link updated by Mod]