Configure telnet access
By default, the telnet service is disabled.
Note Telnet is an insecure protocol and should only be used for backward-compatibility reasons, and only if the network connection is otherwise secured.
Required configuration items
- Enable telnet access.
- Configure access control for the telnet service.
Additional configuration items
- Port to use for communications with the telnet service.
- Multicast DNS (mDNS) support.
See Set the idle timeout for TX64-Rail users for information about setting the inactivity timeout for the telnet service.
Enable the telnet service
The telnet service is disabled by default. To enable the service:
Web
- Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
- Access the device configuration:
Remote Manager:
- Locate your device as described in Use Digi Remote Manager to view and manage your device.
- Click the Device ID.
- Click Settings.
- Click to expand Config.
Local Web UI:- On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
- Click Services > telnet.
- Click Enable.
- Click Apply to save the configuration and apply the change.
Command line
- Select the device in Remote Manager and click Actions > Open Console, or log into the TX64-Rail local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
- At the command line, type config to enter configuration mode:
> config (config)>
- Enable the telnet service:
(config)> service telnet enable true (config)>
- Save the configuration and apply the change.
(config)> save Configuration saved. > - Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.
Configure the service
Web
- Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
- Access the device configuration:
Remote Manager:
- Locate your device as described in Use Digi Remote Manager to view and manage your device.
- Click the Device ID.
- Click Settings.
- Click to expand Config.
Local Web UI:- On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
- Click Services > telnet.
- (Optional) For Port, enter the port number for the service. Normally this should not be changed.
-
Click Access control list to configure access control:
- To limit access to specified IPv4 addresses and networks:
- Click IPv4 Addresses.
- For Add Address, click .
- For Address, enter the IPv4 address or network that can access the device's telnet service. Allowed values are:
- A single IP address or host name.
- A network designation in CIDR notation, for example, 192.168.1.0/24.
- any: No limit to IPv4 addresses that can access the telnet service.
- Click again to list additional IP addresses or networks.
- To limit access to specified IPv6 addresses and networks:
- Click IPv6 Addresses.
- For Add Address, click .
- For Address, enter the IPv6 address or network that can access the device's telnet service. Allowed values are:
- A single IP address or host name.
- A network designation in CIDR notation, for example, 2001:db8::/48.
- any: No limit to IPv6 addresses that can access the telnet service.
- Click again to list additional IP addresses or networks.
- To limit access to hosts connected through a specified interface on the device:
- Click Interfaces.
- For Add Interface, click .
- For Interface, select the appropriate interface from the dropdown.
- Click again to allow access through additional interfaces.
- To limit access based on firewall zones:
- Click Zones. By default, there are three firewall zones already configured: Internal, Edge, and IPsec.
- For Add Zone, click .
- For Zone, select the appropriate firewall zone from the dropdown.
See Firewall configuration for information about firewall zones.
- Click again to allow access through additional firewall zones.
- To limit access to specified IPv4 addresses and networks:
- Multicast DNS (mDNS) is disabled by default. mDNS is a protocol that resolves host names in small networks that do not have a DNS server. To enable mDNS, click Enable mDNS.
- Click Apply to save the configuration and apply the change.
Command line
- Select the device in Remote Manager and click Actions > Open Console, or log into the TX64-Rail local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.
- At the command line, type config to enter configuration mode:
> config (config)>
- Configure access control:
- To limit access to specified IPv4 addresses and networks:
(config)> add service telnet acl address end value (config)>
Where value can be:
- A single IP address or host name.
- A network designation in CIDR notation, for example, 192.168.1.0/24.
- any: No limit to IPv4 addresses that can access the telnet service.
Repeat this step to list additional IP addresses or networks.
- To limit access to specified IPv6 addresses and networks:
(config)> add service telnet acl address6 end value (config)>
Where value can be:
- A single IP address or host name.
- A network designation in CIDR notation, for example, 2001:db8::/48.
- any: No limit to IPv6 addresses that can access the telnet service.
Repeat this step to list additional IP addresses or networks.
- To limit access to hosts connected through a specified interface on the TX64-Rail device:
(config)> add service telnet acl interface end value (config)>
Where value is an interface defined on your device.
Display a list of available interfaces:Use ... network interface ? to display interface information:
(config)> ... network interface ? Interfaces Additional Configuration ------------------------------------------- setupip Setup IP setuplinklocalip Setup Link-local IP lan1 LAN1 loopback Loopback wan1 WAN1 wwan WWAN (config)>
Repeat this step to list additional interfaces.
- To limit access based on firewall zones:
(config)> add service telnet acl zone end value (config)>
Where value is a firewall zone defined on your device, or the any keyword.
Display a list of available firewall zones:Type ... firewall zone ? at the config prompt:
(config)> ... firewall zone ? Zones: A list of groups of network interfaces that can be referred to by packet filtering rules and access control lists. Additional Configuration ------------------------------------------------------------------------------- any dynamic_routes edge external
Repeat this step to include additional firewall zones.
- To limit access to specified IPv4 addresses and networks:
-
(Optional) Configure Multicast DNS (mDNS)
mDNS is a protocol that resolves host names in small networks that do not have a DNS server. mDNS is disabled by default. To enable:
(config)> service telnet mdns enable true (config>
-
(Optional) Set the port number for this service.
The default setting of 23 normally should not be changed.
(config)> service telnet port 25 (config)>
- Save the configuration and apply the change.
(config)> save Configuration saved. > - Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.
PDF
