Router mode
# sysname HUAWEI # lldp enable # undo telnet server enable undo telnet ipv6 server enable # undo icmp name timestamp-reply send # ip vpn-instance __LOCAL_OAM_VPN__ ipv4-family ipv6-family # interface GigabitEthernet0/0/0 ip binding vpn-instance __LOCAL_OAM_VPN__ ip address 192.168.0.1 255.255.255.0 # security password # rule admin forbidden word ****** # undo snmp-agent protocol source all-interface # undo ssh server compatible-ssh1x enable stelnet server enable snetconf server enable undo ssh server-source all-interface undo ssh ipv6 server-source all-interface ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr ssh server hmac sha2_512 sha2_256 ssh server key-exchange dh_group_exchange_sha256 # ssh server publickey ecc rsa_sha2_256 rsa_sha2_512 # ssh server dh-exchange min-len 3072 # ssh client publickey ecc rsa_sha2_256 rsa_sha2_512 # ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr ssh client hmac sha2_512 sha2_256 ssh client key-exchange dh_group_exchange_sha256 # user-interface vty 0 4 authentication-mode aaa idle-timeout 10 0 protocol inbound ssh # ssh server-source -i GigabitEthernet0/0/0 # return
PTN mode
# sysname HUAWEI # undo telnet server enable undo telnet ipv6 server enable # undo icmp name timestamp-reply send # fan speed auto # undo radius enable # snmp-agent trap type entity-trap # dot1x-template 1 # dhcpv6 disable # ip vpn-instance __LOCAL_OAM_VPN__ ipv4-family ipv6-family # interface GigabitEthernet0/0/0 ip binding vpn-instance __LOCAL_OAM_VPN__ ip address 192.168.0.1 255.255.255.0 # security password # rule admin forbidden word ****** # undo snmp-agent protocol source all-interface # aaa authentication-scheme default0 authentication-scheme default1 authentication-scheme default authentication-mode local radius # authorization-scheme default # accounting-scheme default0 accounting-scheme default1 # domain default0 domain default1 domain default_admin # # multicastbandwidth # interface GigabitEthernet0/0/0 speed auto duplex auto undo shutdown ip address 192.168.0.1 255.255.0.0 # interface NULL0 # l2tp-group default-lns # undo ssh server compatible-ssh1x enable stelnet server enable snetconf server enable undo ssh server-source all-interface undo ssh ipv6 server-source all-interface ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr ssh server hmac sha2_512 sha2_256 ssh server key-exchange dh_group_exchange_sha256 # ssh server publickey ecc rsa_sha2_256 rsa_sha2_512 # ssh server dh-exchange min-len 3072 # ssh client publickey ecc rsa_sha2_256 rsa_sha2_512 # ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr ssh client hmac sha2_512 sha2_256 ssh client key-exchange dh_group_exchange_sha256 # user-interface maximum-vty 15 user-interface con 0 user-interface aux 0 user-interface vty 0 14 authentication-mode aaa protocol inbound ssh idle-timeout 10 0 # multicast shaping # mpls mpls te mpls rsvp-te mpls rsvp-te hello mpls rsvp-te hello support-peer-gr mpls te cspf mpls oam based-itu # mpls l2vpn # mpls ldp remote-peer pwe3 # ssh server-source -i GigabitEthernet0/0/0 # local-aaa-server # dtls policy qx_dtls_client # dcn security-mode enable # return
A configuration file can be saved or modified only by management users when the device is not running.