Quidway V100R006C00 Configuration Manual - 2.2.3 Remote Login

IP addresses are configured for establishing NAP connections.

The default IP address pool for establishing NAP connections is 10.167.253.0/24.

When configuring IP addresses, ensure that the primary IP addresses of both the master

and the slave interfaces are on the same network segment, and that the secondary IP

addresses of both the master and the slave interfaces are on the same network segment.

----End

2.2.3 Remote Login

After the neighbor relationship is set up, you can log in to the NAP slave device from the NAP

master device.

Context

Using the 

display nap

interface

 command, you can view the NAP status of an interface to

ensure that the interface is assigned a correct IP address.

Do as follows on the switch where the NAP master interface is configured.

Procedure

Step 1

Run:

system-view

The system view is displayed.

Step 2

Run:

interface

interface-type

interface-number

The interface view is displayed.

Step 3

Run:

nap login neighbor

The login to the slave device from the master device is performed.

l

If the slave device has an empty configuration, you can log in to the slave device from the

master device without a user name and a password.

l

If, however, the slave device is configured with user name(s) and password(s), you must

enter the correct user name and password to perform a NAP-based remote login to the slave

device.

NOTE

To ensure security for NAP, the slave device having an empty configuration checks the source address of

the Telnet login. If the Telnet source address is the NAP address of the master device that is telnetting to

the slave device, the slave device allows the master device to directly log in without being authenticated.

This is because by default, the user level of the remote login based on the NAP address is the same as the

login through the console interface, which enjoys the highest user level. If the Telnet source address is not

the NAP address of the master device, the remote login fails.

If 

ip source check user-bind enable

 command is executed on an interface, the interface cannot connect

to the NAP neighbor.

----End

Quidway S6700 Series Ethernet Switches

Configuration Guide - Device Management

2 NAP Configuration

Issue 02 (2011-10-01)

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd.

17