Huawei Quidway S3900 Series Operation Manual page 60

Operation Manual – Login
Quidway S3900 Series Ethernet Switches-Release 1510
Authentication
mode
Scheme
Note:
To improve security and avoid malicious attack to the unused SOCKETs, TCP 23 and
TCP 22 ports for Telnet and SSH services respectively will be enabled or disabled after
corresponding configurations.
If the authentication mode is none, TCP 23 will be enabled, and TCP 22 will be
disabled.
If the authentication mode is password, and the corresponding password has been
set, TCP 23 will be enabled, and TCP 22 will be disabled.
If the authentication mode is scheme, there are three scenarios: when the
supported protocol is specified as telnet, TCP 23 will be enabled; when the
supported protocol is specified as ssh, TCP 22 will be enabled; when the supported
protocol is specified as all, both the TCP 23 and TCP 22 port will be enabled.
Telnet configuration
AAA
configuration
Specify to
specifies
perform local
whether
authentication
perform local
or RADIUS
authentication
authentication
or
authentication
Configure
user
Configure
and
user name
passwords for
and password
local/RADIUS
users
Set
Manage VTY
type for VTY
users
users
Perform
Perform
common
common
Telnet
configuration
configuration
Huawei Technologies Proprietary
3-3
Chapter 3 Logging in through Telnet
Description
Optional
Local authentication
to performed by default.
Refer
AAA&RADIUS&HWTACACS&
RADIUS
EAD module for more.
Required
The user
password of a local user are
names
configured on the switch.
The user
password of a remote user
are configured
DADIUS server. Refer to
user manual of RADIUS
server for more.
service
Required
Optional
Refer to Table 3-2.
is
to the
name and
name and
on the