Creating a Virtual System Administrator

This section describes how to configure a virtual system administrator, the login method for the configured administrator, and the interface for the administrator to log in to the virtual system.

Context

Once a virtual system is created, the public system administrator can configure one or more administrators for the virtual system. You can log in to and manage the virtual system using the accounts of these administrators. The public system administrator can create system administrators for a virtual system only on the configuration page of the virtual system. The method for creating a virtual system administrator is the same as that for creating a public system administrator.

Data Planning

Item	Data
Administrator	User name: admin@@vsysa Authentication type: Local authentication Password: Vsysadmin@123 Role: System administrator Trusted hosts: 10.3.0.99/32 and 10.3.0.100/32
Login interface	Interface: GE0/0/3 Security zone: Trust IP address: 10.3.0.1/24 Virtual system: vsysa NOTE: If an interface has been assigned to a virtual system, you can use this interface to log in to the virtual system and public system (the name of the administrator must be suffixed with @@public). If the interface is not assigned to any virtual system and belongs to the public system, you can log in to the public system and virtual systems from this interface.
Login method	HTTPS

Item

Data

Administrator

User name: admin@@vsysa

Authentication type: Local authentication

Password: Vsysadmin@123

Role: System administrator

Trusted hosts: 10.3.0.99/32 and 10.3.0.100/32

Interface: GE0/0/3

Security zone: Trust

IP address: 10.3.0.1/24

Virtual system: vsysa

NOTE:

If an interface has been assigned to a virtual system, you can use this interface to log in to the virtual system and public system (the name of the administrator must be suffixed with @@public). If the interface is not assigned to any virtual system and belongs to the public system, you can log in to the public system and virtual systems from this interface.

HTTPS

The following assumes that vsysa has already been created and interface GE0/0/3 has already been allocated for the virtual system as the login interface.

Procedure

Create a virtual system administrator.

Select vsysa in the Virtual System drop-down list at the upper right corner of the page to access vsysa.
Choose System > Administrator > Administrator.

Click Add and set the parameters.

User Name	admin@@vsysa
Authentication Type	Local Authentication
Password	Vsysadmin@123
Confirm Password	Vsysadmin@123
Role	system-admin
Trusted Host #1	10.3.0.99/32
Trusted Host #2	10.3.0.100/32

The name of a virtual system administrator must be suffixed with @@Virtual system name.

If a third-party authentication server is used to authenticate the virtual system administrator, the user name configured on the authentication server does not need to carry the suffix "@@virtual system name". For example, if the authentication server needs to authenticate administrator admin@@vsysa of virtual system vsysa, configure user name admin on the authentication server.

Trusted hosts are the IP addresses of the hosts that are allowed to log in to the virtual system. If the IP address of the administrator PC is fixed, add the IP address as a trusted host so that the administrator can log in to the virtual system using the PC. If the IP address of the administrator PC is dynamically allocated, do not configure any trusted hosts. Otherwise, the administrator may fail to log in to the virtual system if the IP address of the administrator PC changes.

Click OK.

Configure the login interface.
1. Choose Network > Interface.
2. Click next to GE0/0/3 and configure necessary parameters.
  
  IP Address
  
  10.3.0.1/255.255.255.0
  
  Management Access
  
  HTTPS, Ping
  
  Select HTTPS in Access management so that the virtual system administrator can log in to the Web UI over HTTPS. Another option is HTTP. However, you are advised to select HTTPS for security reasons.
  
  Select Ping so that the interface can be pinged to test the connectivity between the administrator PC and the login interface.
3. Click OK.

IP Address	10.3.0.1/255.255.255.0
Management Access	HTTPS, Ping

Follow-up Procedure

After the configuration is complete, you can log in to the virtual system as the virtual system administrator as follows:

Open a browser and enter https://10.3.0.1:Port number. Port number indicates the port number specified when you enable the HTTPS service.

If the browser displays a certificate error page, ignore it and continue to the website.
On the login page, enter the user name (admin@@vsysa) and password (Vsysadmin@123) of the virtual system administrator and click Login to log in to the virtual system.