14
Login overview
The first time you access the device, you can log in to the CLI through the console port. After login,
you can change console login parameters or configure other access methods, including Telnet, SSH,
modem, Web, and SNMP.
Telnet and HTTP-based Web login are not supported in FIPS mode.
Table 6 Login methods at a glance
Login method
Default settings and minimum configuration
requirements
Logging in to the CLI:
• Logging in through the console
port locally
By default, login through the console port is enabled, no username
or password is required, and the user role network-admin is
assigned. After login, configure password or scheme authentication
mode to improve device security.
• Logging in through Telnet
By default, Telnet login is disabled.
To log in through Telnet, complete the following configuration tasks:
• Enable the Telnet server feature.
• Assign an IP address to a Layer 3 interface and make sure the
interface and the Telnet client can reach each other.
• Configure an authentication mode for VTY login users. By
default, password authentication is used but no password is
configured.
• Assign a user role to VTY login users. By default, a VTY login
user is assigned the network-operator user role.
• Logging in through SSH
By default, SSH login is disabled.
To log in through SSH, complete the following configuration tasks:
• Enable the SSH server feature and configure SSH attributes.
• Assign an IP address to a Layer 3 interface and make sure the
interface and the SSH client can reach each other.
• Configure scheme authentication for VTY login users. By
default, password authentication is used.
• Assign a user role to VTY login users. By default, a VTY login
user is assigned the network-operator user role.
• Logging in through a pair of
modems
By default, modem dial-in is enabled, and you can dial in to the
switch. The default user role is network-admin.
Logging in to the Web interface
By default, Web login is disabled.
To enable Web login, perform the following tasks:
• Assign an IP address to a Layer 3 interface, and make sure the
interface and the Web user's host can reach each other.
• Configure a local user account for Web login and assign a user
role to the account. By default, the network-operator user role
is assigned to the account.
• Assign the HTTP or HTTPS service to the user. By default, no
service type is assigned to a local user.
Accessing the device through SNMP
By default, SNMP access is disabled.
To access the device through SNMP, complete the following
configuration tasks:
• Assign an IP address to a Layer 3 interface, and make sure the
interface and the NMS can reach each other.