Example for Configuring Telnet Login for an IPv6 User

Procedure

1. Connect the PC and the router to the network.
2. Assign an IPv6 address to the management interface on the device.

   <HUAWEI> system-view
   [~HUAWEI] sysname Device
   [*HUAWEI] commit
   [~Device] interface GigabitEthernet0/0/0
   [~Device-GigabitEthernet0/0/0] undo shutdown
   [~Device-GigabitEthernet0/0/0] ipv6 enable
   [*Device-GigabitEthernet0/0/0] ipv6 address 2001:db8::1 32
   [*Device-GigabitEthernet0/0/0] commit
   [~Device-GigabitEthernet0/0/0] quit

3. Enable the Telnet server function.

   [~Device] telnet ipv6 server enable
   [*Device] telnet ipv6 server-source -a 2001:db8::1
   [*Device] commit

4. Configure VTY user interfaces on the router.

   # Set the maximum number of VTY user interfaces.

   [~Device] user-interface maximum-vty 15
   [*Device] commit

   # Configure an ACL6 to prohibit users from logging in to another router.

   [~Device] acl ipv6 3001
   [*Device-acl6-advance-3001] rule deny tcp source any destination-port eq telnet
   [*Device-acl6-advance-3001] quit
   [*Device] user-interface vty 0 14
   [*Device-ui-vty0-14] acl ipv6 3001 outbound

   # Set terminal attributes for the VTY user interfaces.

   [*Device-ui-vty0-14] shell
   [*Device-ui-vty0-14] idle-timeout 20
   [*Device-ui-vty0-14] screen-length 30
   [*Device-ui-vty0-14] history-command max-size 20

   # Set an authentication mode for the VTY user interfaces.

   [*Device-ui-vty0-14] authentication-mode aaa
   [*Device-ui-vty0-14] commit
   [~Device-ui-vty0-14] quit

5. Set Telnet user information on the router.

   # Specify the login authentication mode.

   [~Device] aaa
   [*Device-aaa] local-user huawei123 password cipher Hello@123

   

   • If cipher or irreversible-cipher is not specified, a password is entered in man-machine interaction mode and the system does not display the entered password.

     When the user security policy is configured, the value is a string of 8 to 128 case-insensitive characters without spaces. When the user security policy is not configured, the value is a string of 1 to 128 case-insensitive characters without spaces.When the user security policy is configured, the password cannot be the same as the user name or its reverse. The password must contain the following characters: upper-case character, lower-case character, digit, and special character.

     Special characters do not include question marks (?) or spaces. However, when double quotation marks are used around a password, spaces are allowed in the password.

     • Double quotation marks cannot contain double quotation marks if spaces are used in a password.
     • Double quotation marks can contain double quotation marks if no space is used in a password.

     For example, the password "Aa123"45"" is valid, but the password "Aa 123"45"" is invalid.

   • If cipher is specified, a password can be entered in either simple text or cipher text.

     If a password is entered in simple text, the password requirements are the same as those when cipher is not specified. When you input a password in simple text, the system displays the password in simple text mode, which brings risks.

     A password is displayed in cipher text in the configuration file regardless of whether it is entered in simple text or cipher text.

   • If irreversible-cipher is specified, a password can be entered in either simple text or irreversible cipher text.

     If a password is entered in simple text, the password requirements are the same as those when irreversible-cipher is not specified.

     A password is displayed in cipher text in the configuration file regardless of whether it is entered in simple text or irreversible cipher text.

   [*Device-aaa] local-user huawei123 service-type telnet
   [*Device-aaa] local-user huawei123 level 3
   [*Device-aaa] commit
   [~Device-aaa] quit

6. Log in to the device from the PC.

   Double-click PuTTY.exe to open the PuTTY Configuration page, as shown in Figure 2. Select Session, enter the IPv6 address of the server to be accessed in the Host Name (or IP address) text box, and use the default port number 23.

   Figure 2 PuTTY configuration page for Telnet login
   

   Click Open. The system prompts you to enter the user name and password, as shown in Figure 3. In this example, the user name is huawei123, and the password is Hello@123.

   Figure 3 Login window