Operation Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510 Chapter 3 Logging in through Telnet
Huawei Technologies Proprietary
3-3
Authentication
mode
Telnet configuration Description
Specify to
perform local
authentication
or RADIUS
authentication
AAA
configuration
specifies
whether to
perform local
authentication
or RADIUS
authentication
Optional
Local authentication is
performed by default.
Refer to the
AAA&RADIUS&HWTACACS&
EAD module for more.
Configure
user name
and password
Configure
user names
and
passwords for
local/RADIUS
users
Required
z The user name and
password of a local user are
configured on the switch.
z The user name and
password of a remote user
are configured on the
DADIUS server. Refer to
user manual of RADIUS
server for more.
Manage VTY
users
Set service
type for VTY
users
Required
Scheme
Perform
common
configuration
Perform
common
Telnet
configuration
Optional
Refer to
Table 3-2.
Note:
To improve security and avoid malicious attack to the unused SOCKETs, TCP 23 and
TCP 22 ports for Telnet and SSH services respectively will be enabled or disabled after
corresponding configurations.
z If the authentication mode is none, TCP 23 will be enabled, and TCP 22 will be
disabled.
z If the authentication mode is password, and the corresponding password has been
set, TCP 23 will be enabled, and TCP 22 will be disabled.
z If the authentication mode is scheme, there are three scenarios: when the
supported protocol is specified as telnet, TCP 23 will be enabled; when the
supported protocol is specified as ssh, TCP 22 will be enabled; when the supported
protocol is specified as all, both the TCP 23 and TCP 22 port will be enabled.