華為和H3C設(shè)備開啟ssh登錄

華為設(shè)備開啟ssh登錄

1. 在服務(wù)器端生成本地密鑰對

<HUAWEI> system-view
[HUAWEI] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: SSH Server_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
       it will take a few minutes.
Input the bits in the modulus[default = 2048]:2048
Generating keys...
......................++++++++
........................................................++++++++
........+++++++++
.....+++++++++

**2. 在服務(wù)器端創(chuàng)建SSH用戶

# 配置VTY用戶界面。

[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit

**· 創(chuàng)建SSH用戶client001。

# 新建用戶名為client001的SSH用戶，且認(rèn)證方式為password。

[SSH Server] aaa
[SSH Server-aaa] local-user client001 password irreversible-cipher Huawei@123
[SSH Server-aaa] local-user client001 privilege level 3
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] quit
[SSH Server] ssh user client001 authentication-type password

3. SSH服務(wù)器端開啟STelnet服務(wù)功能

# 開啟STelnet服務(wù)功能。

[SSH Server] stelnet server enable
4. 配置SSH用戶client001、client002的服務(wù)方式為STelnet

[SSH Server] ssh user client001 service-type stelnet

參考：http://forum.huawei.com/enterprise//zh/thread-334309.html

H3C S5800-32C設(shè)備開啟ssh登錄

在交換機(jī)上創(chuàng)建vlan接口，并為其分配IP地址，作為客戶端連接ssh服務(wù)器的地址。

<H3C>system-view
[H3C]interface Vlan-interface 1
[H3C-Vlan-interface1]ip add 192.168.0.1 255.255.255.0
[H3C-Vlan-interface1]quit

生成RSA密鑰對
[H3C]public-key local create rsa

設(shè)置用戶接口上的認(rèn)證模式為AAA認(rèn)證。

[H3C]user-interface vty 0 4
[H3C-ui-vty0-4]authentication-mode scheme

設(shè)置用戶接口上支持ssh協(xié)議。

[H3C-ui-vty0-4]protocol inbound all
[H3C-ui-vty0-4]quit

創(chuàng)建用戶ssh-user，設(shè)置認(rèn)證密碼為abc，登錄協(xié)議為SSH，能訪問的命令級別為3。

[H3C]local-user ssh-user
[H3C-luser-ssh-user]password cipher abc
[H3C-luser-ssh-user]service-type ssh
[H3C-luser-ssh-user]authorization-attribute level 3
[H3C-luser-ssh-user]quit

指定ssh-user的認(rèn)證方式為password認(rèn)證，并開啟ssh服務(wù)。

[H3C]ssh user ssh-user service-type stelnet authentication-type password
[H3C]ssh server enable

參考：http://www.h4c.com/cn/d_200808/614453_30005_0.htm#_Toc205610951
http://www.h4c.com/cn/d_201706/1003748_30005_0.htm#_Toc485632771