R3721-F3210-F3171-HP High-End Firewalls Getting Started Guide-6PW101
23
To control Telnet access to the device working as a Telnet server, configure login authentication and user
privilege levels for Telnet users.
By default, password authentication applies to Telnet login, but no login password is configured. To allow
Telnet access to the device after you enable the Telnet server, you must configure a password.
The following are authentication modes available for controlling Telnet logins:
• None—Requires no authentication and is insecure.
• password—Requires a password for accessing the CLI. Keep your password. If you lose your
password, log in to the device through the console port to view or modify the password.
• scheme—Uses the AAA module to provide local or remote authentication. You must provide a
username and password for accessing the CLI. Keep your username and password. If you lose your
local password, log in to the device through the console port to view or modify the password. If you
lose your remote password, contact the server administrator.
Table 5 Configuration required for different Telnet login authentication modes
Authentication
mode
Configuration tasks Reference
None
Set the authentication mode to none for the VTY user
interface.
For more information, see
"Configuring none
authentication for Telnet
login."
Password
Enable password authentication on the VTY user
interface.
Set a password.
For more information, see
"Configuring password
authentication for Telnet
login."
Scheme
Enable scheme authentication on the VTY user interface.
Configure local or remote authentication settings.
To configure local authentication:
1. Configure a local user and specify the password.
2. Configure the device to use local authentication.
To configure remote authentication:
1. Configure the RADIUS or HWTACACS scheme on
the device.
2. Configure the username and password on the AAA
server.
3. Configure the device to use the scheme for user
authentication.
For more information, see
"Configuring scheme
authentication f
or Telnet
login."
Configuring none authentication for Telnet login
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable Telnet.
telnet server enable
By default, the Telnet service is
disabled.
3. Enter one or multiple VTY
user interface views.
user-interface vty first-number
[ last-number ]
N/A