Does Telnet Require Explicit Authentication Mode Configuration?
Short answer
B FALSE. On Huawei devices, the VTY interface defaults to password authentication, so explicit configuration of the authentication mode is not required for users to log in.
Question
Key Takeaways
The trap is assuming that 'no configuration' equals 'no security'; in reality, there is a default secure state (password mode) that permits access if credentials are provided.
This H12-811 question tests knowledge of default VTY settings. The correct answer is False because Huawei routers default to password authentication on Telnet interfaces, allowing login without manually setting the authentication mode.
Common mistake: Candidates often choose True (A), believing that any security feature like authentication must be explicitly enabled by the administrator. They overlook that VRP applies a default password-based authentication policy to VTY lines automatically.
Expert Analysis
The statement is False because it assumes that an explicit authentication mode configuration is a mandatory prerequisite for Telnet login. In Huawei VRP (Versatile Routing Platform), the Virtual Terminal (VTY) user interface has a default behavior that allows connectivity without manual intervention.
By default, VTY lines are configured with authentication-mode password. This means the device expects users to provide a password defined via the user-interface authentication command or local AAA settings. If these credentials match, login succeeds. The system does not require the administrator to explicitly issue the authentication-mode command to enable this default state; it is already active.
The confusion often stems from the fact that while the mode exists by default, the credentials (passwords) must be set. However, the question specifically claims you must configure the mode. Since the mode is pre-configured as 'password', you only need to configure the password itself. Therefore, saying you 'must configure the authentication mode' implies changing or setting it up from scratch, which is incorrect. You can log in using the existing default mode.
Exam Strategy
When faced with absolute statements like 'must configure' or 'cannot work,' check for default behaviors. Many networking devices have built-in fallback mechanisms (like default VLANs or default auth modes). Always verify if the system provides a functional default before assuming manual configuration is mandatory.
Frequently Asked Questions
What is the default authentication mode for VTY lines in Huawei VRP?
Can I log in via Telnet if I haven't set any passwords?
Community Votes
50% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 2 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 2
-
e9b92a4 👍 1 Answered BCorrect answer: B. FALSE Why? On devices (e.g., Huawei VRP), the Telnet VTY/user-interface has a default authentication mode (typically password). So you don’t have to change the authentication mode for Telnet to work. Users can log in as long as matching credentials are configured—either a VTY password (for the default password mode) or AAA credentials if you switch to authentication-mode aaa.
-
4243643 👍 1 Answered ABy default, no authentication mode in configured for a VTY user interface.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.