H3C S3100 8C SI - Page 60

Operation Manual – Login
H3C S3100 Series Ethernet Switches Chapter 3 Logging in through Telnet
3-3
Authenticati
on mode
Telnet configuration Description
Specify to
perform local
authentication
or remote
RADIUS
authentication
AAA configuration
specifies whether to
perform local
authentication or
RADIUS
authentication
Optional
Local authentication is
performed by default.
Refer to the AAA part for
more.
Configure user
name and
password
Configure user
names and
passwords for
local/RADIUS users
Required
z The user name and
password of a local
user are configured
on the switch.
z The user name and
password of a remote
user are configured
on the RADIUS
server. Refer to user
manual of RADIUS
server for more.
Manage VTY
users
Set service type for
VTY users
Required
Scheme
Perform
common
configuration
Perform common
Telnet configuration
Optional
Refer to
Table 3-2.
 Note:
To improve security and prevent attacks to the unused Sockets, TCP 23 and TCP 22,
ports for Telnet and SSH services respectively, will be enabled or disabled after
corresponding configurations.
z If the authentication mode is none, TCP 23 will be enabled, and TCP 22 will be
disabled.
z If the authentication mode is password, and the corresponding password has been
set, TCP 23 will be enabled, and TCP 22 will be disabled.
z If the authentication mode is scheme, there are three scenarios: when the
supported protocol is specified as telnet, TCP 23 will be enabled; when the
supported protocol is specified as ssh, TCP 22 will be enabled; when the supported
protocol is specified as all, both the TCP 23 and TCP 22 port will be enabled.