
1
Introduction
This document provides authentication configuration examples for console and Telnet logins.
The H3C S12500 switch supports the following login authentication modes:
•
None
—Disables authentication. This mode allows access without authentication and is insecure.
•
Password
—Requires a password for login authentication.
•
Scheme
—Requires a username and password for login authentication.
To log in to the switch, you can use the methods shown in
Table 1
Login methods at a glance
Login method
Default settings and minimum configuration requirements
Console, AUX
By default, login through the console port is enabled and no username or password is
required. After login, configure password or scheme authentication mode to improve
device security.
By default, login through the AUX port is enabled and requires a password, but no
password is configured. To use the AUX port for login, log in through any other method
and complete the following configuration tasks:
•
Configure a password for password authentication, or change the authentication
mode and configure parameters for the new authentication mode.
•
Assign a user role (network-operator by default).
Telnet
By default, Telnet login is disabled.
To log in through Telnet, complete the following configuration tasks:
•
Enable the Telnet server function.
•
Assign an IP address to a Layer 3 interface. Make sure the interface and the Telnet
client can reach each other.
•
Configure an authentication mode for VTY login users. By default, password
authentication is used but no password is configured.
•
Assign a user role to VTY login users (network-operator by default).
SSH
By default, SSH login is disabled.
To log in through SSH, complete the following configuration tasks:
•
Enable the SSH server function and configure SSH attributes.
•
Assign an IP address to a Layer 3 interface. Make sure the interface and the SSH
client can reach each other.
•
Configure scheme authentication for VTY users (password authentication by default).
•
Assign a user role to VTY login users (network-operator by default).
For SSH configuration examples, see
H3C S12500 SSH Configuration Examples
.
Prerequisites
The configuration examples in this document were created and verified in a lab environment, and all the
devices were started with the factory default configuration. When you are working on a live network,
make sure you understand the potential impact of every command on your network.