> Source: [sk171744](https://support.checkpoint.com/results/sk/sk171744)

# sk171744 - Client Authentication through telnet

| Property | Value |
|----------|-------|
| Solution ID | sk171744 |
| Date Created | 2021-05-11 |
| Last Modified | 2021-05-18 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Solution

If users configured a Client Authentication rule in the rulebase, there are two ways to establish Client Authentication:  

* To configure Client Authentication through http:
  1. Open a web browser.
  2. Go to *http://\<GW-IP\>:900*.
  3. Enter the applicable username and password. <br />

* To configure Client Authentication through telnet:
  1. Open a terminal.
  2. Run the command *telnet \<GW-IP\> 259.*
  3. Enter the applicable username and password.

**Enabling Client Authentication through telnet in R81.10 (from take 135)**  

Because telnet is an insecure protocol, Client Authentication through telnet is disabled by default. A hash symbol (#) at the beginning of the telnet rule in *$FWDIR/conf/fwauthd.conf* shows that Client Authentication through telnet is disabled:  

`#259 fwssd in.aclientd wait 259`  

To enable Client Authentication through telnet:  

1. Log in to the Security Gateway.
2. Edit *$FWDIR/conf/fwauthd.conf.*
3. Find the telnet rule and remove the hash symbol from the beginning.
   * `259 fwssd in.aclientd wait 259`
4. Save the file.
5. Run *cpstop*.
6. Run *cpstart*.

**Enabling Client Authentication through telnet in Versions Lower than R81.10**  

This problem was fixed. The fix is included in:

* [R80.30 Jumbo Hotfix Accumulator Take 232 - (for Gaia 2.6.18)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152)
* [R80.30 Jumbo Hotfix Accumulator Take 235 - (for Gaia 3.10)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152)
* [R80.40 Jumbo Hotfix Accumulator Take 100](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456)
* [R81 Jumbo Hotfix Accumulator Take 25](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114)

Check Point recommends to always upgrade to the most recent version.  

After users install a Jumbo Hotfix Accumulator, another fix is also required.   

If an admin manually enables telnet according to the above procedure and then installs a later Jumbo Hotfix take, changes are overridden and Client Authentication through telnet is again disabled. This is explained in a comment above above the telnet rule in *$FWDIR/conf/fwauthd.conf* :  

`# By default telnet is disabled, uncomment the following line if you want to enable telnet.`  
`#259 fwssd in.aclientd wait 259`  

Note: The comment above *$FWDIR/conf/fwauthd.conf* has no impact on performance.  

To Enable Client Authentication Through telnet after Installing a Jumbo Hotfix Accumulator:   

As in the previous procedure, remove the leading hash sign from the telnet rule in *$FWDIR/conf/fwauthd.conf* .  

**Important:** Do not remove the comment above the telnet rule.  

`# By default telnet is disabled, uncomment the following line if you want to enable telnet.`  
`259 fwssd in.aclientd wait 259`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content