Enabling or disabling the Telnet or SSH function on the USG6000

16

Enable or disable the Telnet or SSH function on the USG6000 as follows:
1. Run the following commands in the CLI to enable or disable the Telnet or SSH function:

sy
[USG6600-1]aaa
[USG6600-1-aaa]manager-user admin
[USG6600-1-aaa-manager-user-admin]service-type ?
ftp FTP user
ssh SSH user
telnet Telnet user
terminal Terminal user
web Web authentication user

[USG6600-1-aaa-manager-user-admin]service-type ft
[USG6600-1-aaa-manager-user-admin]service-type ftp ssh te
[USG6600-1-aaa-manager-user-admin]service-type ftp ssh terminal

After you run the preceding commands, the admin account has only the ftp ssh terminal permission but not the telnet web permission.

Other related questions:
Enabling or disabling the Telnet or SSH function on the USG2000&5000
Enable or disable the Telnet or SSH function on the USG2000&5000 as follows: 1. Run the following commands in the CLI to enable or disable the Telnet or SSH function: sy [USG5100]aaa [USG5100-aaa]local-user admin service-type ? dot1x 802.1X user ftp FTP user ppp Indicate PPP user ssh SSH user telnet Telnet user terminal Terminal user web Web authentication user [USG5100-aaa]local-user admin service-type ssh web telnet As shown in the preceding method, only the SSH, web, and Telnet services are enabled for the admin account. Services can be enabled as required.

Configuring Telnet and SSH on the USG6000
Configure Telnet and SSH on the USG6000 as follows: 1. Set the administrator IP addresses that can access the device remotely. The administrator cannot use IP addresses that are not specified in the ACL to remotely access the device through Telnet or SSH. 2. Configure connection number limit on the VTY administrator interface. Limit the number of concurrent remote login sessions on the device to avoid occupying two many system resources, facilitate centralized operation and maintenance, and ensure normal operation when a fault occurs. 3. Configure login through Telnet or SSH.

Disabling the Telnet or SSH service on the USG2000&5000&6000
USG2000&5000& Perform as follows to disable the Telnet or SSH service:
1.  Disable the Telnet service.
<USG> system-VIEW
Enter system view, return user view with Ctrl+Z.  
[USG]undo telnet  server  enable 

2.  Disable the SSH service.
system 
Enter system view, return user view with Ctrl+Z.  
[USG]undo stelnet server  enable

Enable the Telnet server function
The common cause of a login failure to the Telnet server is that the Telnet server function is disabled. By default, the Telnet server function is disabled on a switch. You can run the undo telnet [ ipv6 ] server disable command in the system view to enable the Telnet server function. system-view [~HUAWEI] undo telnet server disable [*HUAWEI] commit

How to enable the Telnet server function for a WLAN device
By default, the Telnet server function is enabled for WLAN devices of V200R003 and earlier versions and disabled for WLAN devices of V200R005 and later versions. Run the telnet server enable command to enable the Telnet server function. For a Fit AP, if it has gone online on an AC, run the telnet enable command in the AP profile view of the AC to enable the Telnet service for this Fit AP.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top