protocol inbound

Use protocol inbound to enable a user line to support Telnet, SSH, or both protocols.

Use undo protocol inbound to restore the default.

Syntax

In non-FIPS mode:

protocol inbound { all | ssh | telnet }

undo protocol inbound

In FIPS mode:

protocol inbound ssh

undo protocol inbound

Default

In non-FIPS mode, both protocols are supported.

In FIPS mode, SSH is supported.

Views

VTY line view, VTY line class view

Predefined user roles

network-admin

mdc-admin

Parameters

all: Supports both protocols.

ssh: Supports SSH only.

telnet: Supports Telnet only.

Usage guidelines

This configuration is effective only for a user who logs in through the user line after the configuration is completed.

Before configuring a user line to support SSH, set the authentication mode to scheme for the user line. For more information, see authentication-mode.

In VTY line view, this command is associated with the authentication-mode command. If you specify a non-default value for only one of the two commands in VTY line view, the other command uses the default setting, regardless of the setting in VTY line class view.

Examples

# Enable user lines VTY 0 through VTY 4 to support only SSH.

<Sysname> system-view
[Sysname] line vty 0 4
[Sysname-line-vty0-4] authentication-mode scheme
[Sysname-line-vty0-4] protocol inbound ssh

# Enable scheme authentication for the VTY line class and enable the line class to support only SSH. Disable authentication for VTY lines 0 through 4.

<Sysname> system-view
[Sysname] line class vty
[Sysname-line-class-vty] authentication-mode scheme
[Sysname-line-class-vty] protocol inbound ssh
[Sysname-line-class-vty] line vty 0 4
[Sysname-line-vty0-4] authentication-mode none