Chapter 1 Login Commands - H3C S3100 Series Command Manual

Command Manual (For Soliton) – Login
H3C S3100 Series Ethernet Switches
Caution:
For a VTY user interface, to specify the none keyword or password keyword for login
users, make sure that SSH is not enabled in the user interface. Otherwise, the
configuration fails. Refer to the protocol inbound command for related configuration.
Note:
To improve security and prevent attacks to the unused Sockets, TCP 23 and TCP 22,
ports for Telnet and SSH services respectively, will be enabled or disabled after
corresponding configurations.
If the authentication mode is none, TCP 23 will be enabled, and TCP 22 will be
disabled.
If the authentication mode is password, and the corresponding password has been
set, TCP 23 will be enabled, and TCP 22 will be disabled.
If the authentication mode is scheme, there are three scenarios: when the
supported protocol is specified as telnet, TCP 23 will be enabled; when the
supported protocol is specified as SSH, TCP 22 will be enabled; when the
supported protocol is specified as all, both the TCP 23 and TCP 22 port will be
enabled.
Examples
Example of the password authentication mode configuration
# Configure to authenticate users using the local password on the console port, and set
the authentication password to aabbcc in plain text.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface aux 0
[Sysname-ui-aux0] authentication-mode password
[Sysname-ui-aux0] set authentication password simple aabbcc
After the configuration, when a user logs in to the switch through the console port, the
user must enter the correct password.
Example of the scheme authentication mode configuration
# Configure the authentication mode as scheme for VTY users logging in through
Telnet.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
1-2

Chapter 1 Login Commands