H3C S3100-52P Operation Manual page 62

Operation Manual – Login
H3C S3100-52P Ethernet switch
Authentication
mode
Scheme
Note:
To improve security and prevent attacks to the unused Sockets, TCP 23 and TCP 22,
ports for Telnet and SSH services respectively, will be enabled or disabled after
corresponding configurations.
If the authentication mode is none, TCP 23 will be enabled, and TCP 22 will be
disabled.
If the authentication mode is password, and the corresponding password has been
set, TCP 23 will be enabled, and TCP 22 will be disabled.
If the authentication mode is scheme, there are three scenarios: when the
supported protocol is specified as telnet, TCP 23 will be enabled; when the
supported protocol is specified as ssh, TCP 22 will be enabled; when the supported
protocol is specified as all, both the TCP 23 and TCP 22 port will be enabled.
Telnet configuration
Specify to AAA configuration
perform local specifies whether
authentication to perform local
or remote authentication or
RADIUS RADIUS
authentication authentication
Configure user
Configure names and
user name passwords for
and password local/RADIUS
users
Manage VTY Set service type for
users VTY users
Perform Perform common
common Telnet
configuration configuration
3-3
Chapter 3 Logging In Through Telnet
Description
Optional
Local authentication is
performed by default.
Refer to the AAA part
for more.
Required
The user name and
password of a local user
are configured on the
switch.
The user name and
password of a remote
user are configured on
the RADIUS server.
Refer to user manual of
RADIUS server for
more.
Required
Optional
Refer to Table 3-2.