Configure Telnet Access on Huawei Network Switches

By default, Huawei network switches do not enable any Telnet-related functions. To allow remote management via Telnet, you must activate the Telnet server, configure VTY user interface protocol support, and set up VTY authentication and user privileges.

Activation Steps

  1. Enable the Telnet Server
    <HUAWEI> system-view
    [HUAWEI] telnet server-source -i Vlanif 10  // Applicable for V200R020C00 and later versions; binds the server to the interface (Vlanif 10) used for client 10.10.10.20 access
    [HUAWEI] telnet server enable
    
  2. Configure VTY User Interface Protcool Support
    [HUAWEI] user-interface vty 0 4
    [HUAWEI-ui-vty0-4] protocol inbound telnet    // Restricts VTY 0–4 to accept only Telnet connections
    
  3. Configure VTY Authentication and User Privileges
    • Option 1: AAA Authentication Requires creating a local AAA user with access type and privilege level:
      [HUAWEI-ui-vty0-4] authentication-mode aaa    // Enables AAA authentication on VTY 0–4
      [HUAWEI-ui-vty0-4] quit
      [HUAWEI] aaa
      [HUAWEI-aaa] local-user hwadmin789 password irreversible-cipher KjLm@456    // Creates a local user hwadmin789 with encrypted password KjLm@456
      [HUAWEI-aaa] local-user hwadmin789 service-type telnet    // Specifies Telnet as the allowed access type
      [HUAWEI-aaa] local-user hwadmin789 privilege level 15    // Sets user privilege to level 15 (full administrator permissions)
      Warning: This operation may affect online users, are you sure to change the user privilege level ?[Y/N]y
      
    • Option 2: Simple Password Authentication Directly configures a shared login password and privilege level on the VTY interface:
      [HUAWEI-ui-vty0-4] authentication-mode password    // Enables simple password authentication
      [HUAWEI-ui-vty0-4] set authentication password cipher ZxCv#123    // Sets the encrypted shared login password
      [HUAWEI-ui-vty0-4] user privilege level 15    // Applies level 15 permissions to all VTY 0–4 sessions
      
  4. Test Telnet Connection from Client On a Windows PC, open Command Prompt and run:
    C:\Users\Admin> telnet 10.10.10.20 23
    
    For AAA authentication, enter the username (hwadmin789) and password (KjLm@456) when prompted. A successful login will display a user view prompt.

Verificasion Commands

  • Check active user sessions:
    <HUAWEI> display users [ all ]
    
  • Review established TCP connections:
    <HUAWEI> display tcp status
    
  • Confirm Telnet server connection details:
    <HUAWEI> display telnet server status
    

Tags: Huawei Switch Telnet Configuration Remote Management VTY Interface AAA Authentication

Posted on Mon, 27 Jul 2026 16:47:42 +0000 by philvia