Skip to main content

Enable Telnet or RSH access to the cluster

Contributors netapp-barbe netapp-ahibbard netapp-aherbin
PDFs

As a security best practice, Telnet and RSH are disabled by default. To enable the cluster to accept Telnet or RSH requests, you must enable the service in the default management service policy.

Telnet and RSH are not secure protocols; you should consider using SSH to access the cluster. SSH provides a secure remote shell and interactive network session. For more information, refer to Access the cluster using SSH.

About this task

  • ONTAP supports a maximum of 50 concurrent Telnet or RSH sessions per node.

    If the cluster management LIF resides on the node, it shares this limit with the node management LIF.

    If the rate of incoming connections is higher than 10 per second, the service is temporarily disabled for 60 seconds.

  • RSH commands require advanced privileges.

ONTAP 9.10.1 or later
Steps

  1. Confirm that the RSH or Telnet security protocol is enabled:

    security protocol show

    1. If the RSH or Telnet security protocol is enabled, continue to the next step.

    2. If the RSH or Telnet security protocol is not enabled, use the following command to enable it:

      security protocol modify -application <rsh/telnet> -enabled true

  2. Confirm that the management-rsh-server or management-telnet-server service exists on the management LIFs:

    network interface show -services management-rsh-server

    or

    network interface show -services management-telnet-server

    1. If the management-rsh-server or management-telnet-server service exists, continue to the next step.

    2. If the management-rsh-server or management-telnet-server service does not exist, use the following command to add it:

      network interface service-policy add-service -vserver cluster1 -policy default-management -service management-rsh-server

      network interface service-policy add-service -vserver cluster1 -policy default-management -service management-telnet-server