4000 Router Series Fundamentals Configuration Guide

Ste

Command

Remarks

4. Enable scheme

authentication.

authentication-mode scheme

By default, password authentication is

enabled for VTY lines.

To use scheme authentication, you must also configure login authentication methods in ISP domain view.

For more information, see Security Configuration Guide.

The next time you attempt to Telnet to the CLI, you must provide the configured login username and

password, as shown in Figure 22. If the max

imum number of login users has been reached, your login

attempt fails and the message "All lines are used, please try later!" appears.

Figure 22 Scheme authentication interface for Telnet login

Setting the maximum number of concurrent Telnet users

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Set the maximum number

of concurrent Telnet users.

aaa session-limit telnet

max-sessions

Changing this setting does not affect online

users. If the current number of online FTP users is

equal to or greater than the new setting, no

additional FTP users can log in until online users

log out.

For more information about this command, see

Security Command Reference.

Setting the DSCP value for outgoing Telnet packets

The DSCP value is carried in the ToS/Traffic class field of an IP or IPv6 packet, and it indicates the

transmission priority of the packet.

To set the DSCP value for outgoing Telnet packets: