Configuring vty Lines

By default five vty lines (0–4) are open. You can open additional lines using the line vty command. Once lines are open, login is enabled by default. Before users can access the lines, you must configure a password, disable login using the no login command, or configure AAA authentication on the lines.

line vty

• Use to open or configure vty lines.
• You can specify a single line or a range of lines. The range is 0–29.
• Example

  host1(config)#line vty 6 10

  host1(config-line)#

• Use the no version to remove a vty line or a range of lines from the configuration. Lines that you remove will no longer be available for use by Telnet, FTP, or SSH. When you remove a vty line, the system removes all lines above that line. For example, no line vty 6 causes the system to remove lines 6 through 29. You cannot remove lines 0 through 4.
• See line.

password

• Use to specify a password on a single line or a range of lines.
• If you enable login but do not configure a password, the system will not allow you to access virtual terminals.
• Specify a password in plain text (unencrypted) or cipher text (encrypted). In either case, the system stores the password as encrypted.
• You can use the following keywords:
  • 0 (zero)—Specifies an unencrypted password
  • 5—Specifies a secret
  • 7—Specifies an encrypted password
• Example 1 (unencrypted password)

  host1(config-line)#password 0 mypassword

• Example 2 (secret)

  host1(config-line)#password 5 y13_x

• Example 3 (encrypted password)

  host1(config-line)#password 7 x13_2

• Use the no version to remove the password. By default, no password is specified.
• See password.

For more information about configuring security for vty lines, see Managing the System .

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.