Stelnet(ssh)登陆华为交换机配置教程(2)

h80/frznvquQnko/ytkq9w8k5pYRLSVzxxoZqkOpqvgLOm87N8tzcQJ0TQpJ+WNm gA==

---- END SSH2 PUBLIC KEY ----

Public key code for pasting into OpenSSH authorized_keys file : ssh-dss

AAAAB3NzaC1kc3MAAACBAKScXq+QbICxxHTMsNR8aWUi3888lgK62Pzo9+N6ab4YjLfYWGtQ

7rxUv7CJYaDdMV9/MIDw20fk7NzBDn7BjTE1zXj34AL7a0y1m6XizbiYQ/rQWZi47qjnOV/Hyp0WVUeS

c2iZFK8JbP3BJWzIoH/d3mA78xxOpAt1KseBfod/AAAAFQDLxcC8LXtt/hWn+aNvbtFbbsyfJwAAAIBt

MgLnTcrF25cDQwWNef2ydtXKosjQDD1mb2HU8uNkRUAn/QQNYbKjrzzta8Nsxo3o3zX5+vgC7XO8vWbF

WuD2aVMMFBszpaHPd9Y2daXvOyZKtm4qjP+xaQ5F+G+s8bPioRMowUun88oNGYs+2UNoRbpeifGtt570

WfgmuaXPbQAAAIB/N5xGhTKNzvlgOpIu8P9IhMdWDtPgZgy37S+EOSGf62G95lr5tV1FruhEX/o/Nq06

UxDSNiFK8WGfYcsxmAru5Na9mIAD6QOP1UkzJpSMh80/frznvquQnko/ytkq9w8k5pYRLSVzxxoZqkOp

qvgLOm87N8tzcQJ0TQpJ+WNmgA== dsa-key

[Huawei]

2、打开STelnet服务器功能 [Huawei]stelnet server enable

3、配置SSH服务器端口号 [Huawei]ssh server port ?

INTEGER<22,1025-55535> Set the port number, the default value is 22

4、配置密钥对更新时间

[Huawei]ssh server rekey-interval ?

INTEGER<0-24> Set the interval (in hours), the default value is 0, which means the server will not generate the new key automatically

5、配置SSH认证超时时间 [Huawei]ssh server timeout ?

INTEGER<1-120> Set the authentication timeout, the default value is 60 seconds

6、配置SSH认证重试次数

配置SSH认证重试次数用来设置SSH用户请求连接的认证重试次数，防止非法用户登录。

[Huawei]ssh server authentication-retries ?

INTEGER<1-5> Set the authentication times, the default value is 3 times

7、使能兼容低版本SSH协议

[Huawei]ssh server compatible-ssh1x ?

enable Enable or disable the compatibility with SSH1, the default value is enabled

8、配置SSH服务器的源接口

指定SSH服务器端的源接口前，必须已经成功创建LoopBack接口，否则会导致本配置无法成功执行。 [Huawei]ssh server-source -i ?

Not exists loopback interface

9、配置访问控制列表 [Huawei]ssh server acl 2001

10、配置通过SSH登陆的帐号密码 具体配置见VTY配置

11、配置VTY用户界面支持SSH协议 [Huawei-ui-vty0-4]protocol inbound ? all All protocols ssh SSH protocol telnet Telnet protocol

12、创建SSH用户 [Huawei]ssh user ?

STRING<1-64> The specified user name

[Huawei]ssh user 1

Info: Succeeded in adding a new SSH user. [Huawei]

13、配置SSH用户的认证方式 [Huawei]ssh user 1 ? assign Set the key

authentication-type Authentication type authorization-cmd Authorization mode service-type Set service type sftp-directory Set SFTP directory

[Huawei]ssh user 1 authentication-type ?

all Any authentication mode, any one of password, RSA, and DSA

dsa DSA authentication password Password authentication

password-dsa Both password and DSA authentication modes password-rsa Both password and RSA authentication modes rsa RSA authentication

如果没有使用ssh user命令配置相应的SSH用户，则可以直接执行ssh authentication-type default password命令为用户配置SSH认证缺省采用密码认证，在用户数量比较多时，对用户使用缺省密码认证方式可以简化配置，此时只需再配置AAA用户即可。

14、配置SSH用户的服务类型 [Huawei]ssh user 1 service-type ? all Set all service type sftp Set SFTP service type stelnet Set Stelnet service type