HUAWEI AR G3 HOW-TO

CONFIGURING A TELNET ACCESS

www.ipmax.it

GENERAL INFOS AND PREREQUISITES

You can locally or remotely log in to a
Huawei AR G3 Router through the
console port, Telnet, or SSH.
To configure, monitor, and maintain
the local or remote router, you need
to configure the user interface, the
user management, and the terminal
service.
In this example we will use a AR1220
router (shown in the picture) to
describe how to configure a telnet
access.
We will assume that the technician is
able to access the CLI.

AR1220

LOGIN ADDRESS CONFIGURATION

1. First of all configure the telnet login address
Enter the configuration view
<Huawei> system-view

Choose the physical interface

[Huawei] interface GigabitEthernet 0/0/1

[Huawei-GigabitEthernet0/0/1] ip address 10.1.1.2 255.0.0.0
[Huawei-GigabitEthernet0/0/1] quit
Assign the Ip Address

LOGIN AUTHENTICATION MODE

CONFIGURATION
2. Configure the login authentication mode
Enter into AAA view

Configure local user (test1) and password (test1pwd)

[Huawei] aaa
[Huawei-aaa] local-user test1 password cipher test1pwd
[Huawei-aaa] local-user test1 service-type telnet
[Huawei-aaa] local-user test1 privilege level 3

Configure User services

Configure User rights

[Huawei-aaa] quit
[Huawei] user-interface vty 0 4
[Huawei-ui-vty0-4] authentication-mode aaa
[Huawei-ui-vty0-4] quit

Configure router Telnet authentication mode as an AAA certification

ROUTER CONFIGURATION VERIFICATION (1)

3. Verify the configuration is OK

[Huawei] display current-configuration

..
#

Display the active routers configuration

aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default

In this example, the interesting parts are in bold red

domain default
domain default_admin
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
local-user test1 password cipher %$%$%Rr>QA"2a-`^(_&+Gvf6$"nM%$%$
local-user test1 privilege level 3
local-user test1 service-type telnet
#

ROUTER CONFIGURATION VERIFICATION (2)

#
interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/1
ip address 10.1.1.2 255.0.0.0
#
interface NULL0
#
user-interface con 0

In this example, the interesting parts are in bold red

authentication-mode password
user-interface vty 0 4
authentication-mode aaa
user-interface vty 16 20
#

4. Now you are ready to run the Telnet client on the PC

MORE NEEDS?
See hints on www.ipmax.it
Or email us your questions to info_ipmax@ipmax.it

IPMAX
IPMAX is a Huawei Partner in Italy.
IPMAX is the ideal partner for companies seeking quality in products and
services. IPMAX guarantees method and professionalism to support its
customers in selecting technologies with the best quality / price ratio, in the
design, installation, commissioning and operation.

IPMAX srl
Via Ponchielli, 4
20063 Cernusco sul Naviglio (MI) Italy
+39 02 9290 9171