Telnet and CLI Parameters

'Embedded Telnet Server'

configure system > cli-settings > telnet

[TelnetServerEnable]

Enables the device's embedded Telnet server.

■

[0] Disable

■

[1] Enable Unsecured (default)

■

[2] Enable Secured

Note: Only management users with Security Administrator or Master user levels can access the CLI's Privileged command mode.

'Telnet Server TCP Port'

configure system > cli-settings > telnet-port

[TelnetServerPort]

Defines the port number for the embedded Telnet server.

The valid range is all valid port numbers. The default port is 23.

'Telnet Server Idle Timeout'

configure system > cli-settings > idle-timeout

[TelnetServerIdleDisconnect]

Defines the duration of an idle CLI (Telnet or SSH) session after which the session is automatically disconnected.

The valid range is any value. The default is 5. When configured to 0, idle sessions are not disconnected.

Note: If you change the parameter's value when there are current Telnet/SSH sessions, the parameter's previous setting is still applied to these current sessions and the parameter's new setting is applied only to new sessions.

'Maximum Telnet Sessions'

configure system > cli-settings > telnet-max-sessions

[TelnetMaxSessions]

Defines the maximum number of permitted, concurrent Telnet or SSH sessions.

The valid range is 1 to 5 sessions. The default is 2.

Note: Before changing the value, make sure that not more than this number of sessions are currently active; otherwise, the new setting will not take effect.

'Default Terminal Window Height'

configure system > cli-settings > default-window-height

[DefaultTerminalWindowHeight]

Defines the number (height) of output lines displayed in the CLI terminal window. This applies to all new CLI sessions and is preserved after device resets.

The valid value range is -1 (default) and 0-65535:

■

A value of -1 means that the parameter is disabled and the settings of the CLI command window-height is used.

■

A value of 0 means that all the CLI output is displayed in the window.

■

A value of 1 or greater displays that many output lines in the window and if there is more output, the “—MORE—" prompt is displayed. For example, if you configure the parameter to 4, up to four output lines are displayed in the window and if there is more output, the “—MORE—" prompt is displayed (at which you can press the spacebar to display the next four output lines).

Note: You can override this parameter for a specific CLI session and configure a different number of output lines, by using the window-height CLI command in the currently active CLI session.

configure system > mgmt-auth > obscure-password-mode

[CliObscuredPassword]

Enables the device to enforce obscured (i.e., encrypted) passwords whenever you create a new management user or modify the password of an existing user, through CLI (configure system > user) .

■

[0] = (Default) Disabled - passwords are configured in plain text.

■

[1] = Enabled - passwords must be configured in encrypted format. To obtain an encrypted (obscured) password:

a.

Enable the parameter.

b.

Configure the user's password in the Web interface's Local Users table (see Configuring Management User Accounts).

c.

Save the device's CLI Script file to your local PC (see Saving and Loading CLI Script Files).

d.

Open the file, and then copy the encrypted password to the CLI where you are configuring the user.

'Kex Algorithms String'

configure system > cli-settings > ssh-kex-algorithms-string

[SSHKexAlgorithmsString]

Defines the SSH Key Exchange Algorithms.

The valid values include:

■

diffie-hellman-group-exchange-sha256

■

diffie-hellman-group14-sha1

■

diffie-hellman-group1-sha1

You can configure the parameter with multiple values, using the colon (:) as a separator. For example, diffie-hellman-group1-sha1:diffie-hellman-group-exchange-sha256.

The default is diffie-hellman-group1-sha1:diffie-hellman-group-exchange-sha256.

'Ciphers String'

configure system > cli-settings > ssh-ciphers-string

[SSHCiphersString]

Defines the SSH cipher string.

The valid values include:

■

aes128-ctr

■

aes128-cbc

■

aes256-ctr

■

aes256-cbc

You can configure the parameter with multiple values, using the colon (:) as a separator. For example, aes128-ctr:aes128-cbc.

The default is aes128-ctr:aes128-cbc.

'MACs String'

configure system > cli-settings > ssh-macs-string

[SSHMACsString]

Defines the SSH MAC algorithms.

The valid value is hmac-sha1 or hmac-sha2-256. You can configure the parameter with both values using the colon (:) as a separator, for example, hmac-sha1:hmac-sha2-256.

The default is hmac-sha1:hmac-sha2-256.