h3c交换机s5600怎样开启ssh

Question

如题所述

Answer 1

(1) 配置SSH服务器 # 生成RSA密钥对。

<Switch> system-view
[Switch] public-key local create rsa
The range of public key size is (512 ~ 2048). NOTES: If the key modulus is greater than 512, It will take a few minutes. Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]: Generating Keys... ++++++++ ++++++++++++++ +++++ ++++++++
# 生成DSA密钥对。
[Switch] public-key local create dsa
The range of public key size is (512 ~ 2048). NOTES: If the key modulus is greater than 512, It will take a few minutes. Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]: Generating Keys...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++
# 启动SSH服务器。
[Switch] ssh server enable
# 配置VLAN接口1的IP地址，客户端将通过该地址连接SSH服务器。
[Switch] interface vlan-interface 1
[Switch-Vlan-interface1] ip address 192.168.1.40 255.255.255.0

[Switch-Vlan-interface1] quit
# 设置SSH客户端登录用户界面的认证方式为AAA认证。
[Switch] user-interface vty 0 4
[Switch-ui-vty0-4] authentication-mode scheme
# 设置Switch上远程用户登录协议为SSH。
[Switch-ui-vty0-4] protocol inbound ssh [Switch-ui-vty0-4] quit
# 创建本地用户client001，并设置用户访问的命令级别为3。
[Switch] local-user client001
[Switch-luser-client001] password simple aabbcc [Switch-luser-client001] service-type ssh
[Switch-luser-client001] authorization-attribute level 3 [Switch-luser-client001] quit
# 配置SSH用户client001的服务类型为Stelnet，认证方式为password认证。（此步骤可以不配置）
[Switch] ssh user client001 service-type stelnet authentication-type password