Enabling or disabling the Telnet or SSH function on the USG2000&5000

0

Enable or disable the Telnet or SSH function on the USG2000&5000 as follows:

1. Run the following commands in the CLI to enable or disable the Telnet or SSH function:
sy
[USG5100]aaa
[USG5100-aaa]local-user admin service-type ?
dot1x 802.1X user
ftp FTP user
ppp Indicate PPP user
ssh SSH user
telnet Telnet user
terminal Terminal user
web Web authentication user
[USG5100-aaa]local-user admin service-type ssh web telnet
As shown in the preceding method, only the SSH, web, and Telnet services are enabled for the admin account. Services can be enabled as required.

Other related questions:
Disabling the Telnet or SSH service on the USG2000&5000&6000
USG2000&5000& Perform as follows to disable the Telnet or SSH service:
1.  Disable the Telnet service.
<USG> system-VIEW
Enter system view, return user view with Ctrl+Z.  
[USG]undo telnet  server  enable 

2.  Disable the SSH service.
system 
Enter system view, return user view with Ctrl+Z.  
[USG]undo stelnet server  enable

Enabling or disabling the Telnet or SSH function on the USG6000
Enable or disable the Telnet or SSH function on the USG6000 as follows: 1. Run the following commands in the CLI to enable or disable the Telnet or SSH function: sy [USG6600-1]aaa [USG6600-1-aaa]manager-user admin [USG6600-1-aaa-manager-user-admin]service-type ? ftp FTP user ssh SSH user telnet Telnet user terminal Terminal user web Web authentication user [USG6600-1-aaa-manager-user-admin]service-type ft [USG6600-1-aaa-manager-user-admin]service-type ftp ssh te [USG6600-1-aaa-manager-user-admin]service-type ftp ssh terminal After you run the preceding commands, the admin account has only the ftp ssh terminal permission but not the telnet web permission.

Changing the Telnet/SSH login timeout period on the USG2000&5000&6000
Change the Telnet/SSH login timeout period on the USG2000&5000&6000 as follows: Set the login timeout period for the Telnet/SSH user. For example: Set the login timeout period for the Telnet user to 1 minute and 30 seconds. system-view [sysname] user-interface vty 0 4 [sysname-ui-vty0-4] idle-timeout 1 30

Whether the USG2000&5000 support the Telnet function
By default, the USG2000&5000 have the Telnet function enabled, and users can directly use the initial administrator account admin to log in to the device.

Configuring SSH on the USG2000&5000
Configure SSH on the USG2000&5000 as follows: Configuration roadmap: USG_A serves as the client, and USG_B as the SSH server. 1. Create an SSH user on USG_B. 2. Generate a local key pair on USG_B. 3. Enable the STelnet/SFTP service on USG_B. 4. Log in to USG_B through USG_A on the client.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top