Sx300 Series Switches Typical Configuration Examples
Example for Configuring the Device as the Telnet Client to Log In to Another Device
Networking Requirements
As shown in Figure 2-7, the PC and Client have reachable routes to each other; Client and Server have reachable routes to each other. The user needs to manage and maintain Server remotely. However, the PC cannot directly log in to Server through Telnet because it has no reachable route to Server. The user can log in to Client through Telnet, and then log in to Server from Client. To prevent unauthorized devices from logging in to Server through Telnet, an ACL needs to be configured to allow only the Telnet connection from Client to Server.
The Telnet protocol poses a security risk, and therefore the STelnet V2 protocol is recommended.
Configuration Roadmap
The configuration roadmap is as follows:
- Configure the Telnet authentication mode on Server.
- Configure the login user information on Server.
- Configure an ACL on Server to allow Client access.
- Log in to Server from Client through Telnet.
Procedure
- Configure the Telnet authentication mode and password on Server.
<HUAWEI> system-view [HUAWEI] sysname Server [Server] telnet server enable //Enable Telnet. [Server] telnet server-source -i Vlanif 10 //Configure the source interface of the server as the interface corresponding to 10.2.1.1. Assume that the interface is Vlanif 10. [Server] user-interface vty 0 4 [Server-ui-vty0-4] user privilege level 15 [Server-ui-vty0-4] protocol inbound telnet [Server-ui-vty0-4] authentication-mode aaa [Server-ui-vty0-4] quit
- Configure the login user information.
[Server] aaa [Server-aaa] local-user admin1234 password irreversible-cipher Helloworld@6789 [Server-aaa] local-user admin1234 service-type telnet [Server-aaa] local-user admin1234 privilege level 3 [Server-aaa] quit
- Configure an ACL on Switch2 to allow Client access.
[Server] acl 2000 [Server-acl-basic-2000] rule permit source 10.1.1.1 0 [Server-acl-basic-2000] quit [Server] user-interface vty 0 4 [Server-ui-vty0-4] acl 2000 inbound [Server-ui-vty0-4] quit
![]()
It is optional to configure an ACL for Telnet services.
- Verify the configuration.
# After the preceding configuration, you can log in to Server from Client through Telnet. You cannot log in to Server from other devices.
<HUAWEI> system-view [HUAWEI] sysname Client [Client] quit <Client> telnet 10.2.1.1 Trying 10.2.1.1 ... Press CTRL+K to abort Connected to 10.2.1.1 ... Warning: Telnet is not a secure protocol, and it is recommended to use STelnet. Login authentication Username:admin1234 Password: <Server>
Configuration File
Server configuration file
# sysname Server # telnet server enable telnet server-source -i Vlanif 10 # acl number 2000 rule 5 permit source 10.1.1.1 0 # aaa local-user admin1234 password irreversible-cipher $1a$gRNl~ukoL~0.WU)C2]~2a}Cz/Y0-u8M{j@Ql6/xHryO-Y7m{=A>kWc.-q}>*$ local-user admin1234 privilege level 3 local-user admin1234 service-type telnet # user-interface vty 0 4 acl 2000 inbound authentication-mode aaa user privilege level 15 protocol inbound telnet # return