Hi@ster
When a user logs in using telnet, he will search from vty0 to vty4 for the first free vty that only binds to the telnet protocol. If he finds it, he will log in with this vty. Otherwise, it will not cross this vty to the next vty, regardless of success For certification.
If there is no free vty bound to the telnet protocol, the first free vty bound to all protocol will be searched from vty0 to vty4. If it is found to log in with this vty, it will not cross this vty to the next vty for authentication.