msr5660 配置ssh 无法访问

 

 sysname H3C

#

 telnet server enable

#

 password-recovery enable

#

vlan 1

#

controller Cellular2/0/0

#

controller Cellular2/0/1

#

interface Aux0/0/1

#

interface NULL0

#

interface Vlan-interface1

#

interface GigabitEthernet2/0/0

 port link-mode route

 combo enable copper

 ip address 103.85.177.116 255.255.255.248

 nat outbound

#

interface GigabitEthernet2/0/1

 port link-mode route

 combo enable copper

 ip address 172.16.216.2 255.255.255.252

 nat outbound

#

interface GigabitEthernet2/0/2

 port link-mode route

 combo enable copper

 ip address 172.16.0.2 255.255.252.0

#

interface GigabitEthernet2/0/3

 port link-mode route

 combo enable copper

 ip address 10.7.0.246 255.255.255.252

 nat outbound

#

interface M-GigabitEthernet0

#

route-policy 1 permit node 1

 if-match ip address acl 3000

 apply ip-address next-hop 103.85.177.116

#

route-policy 2 permit node 2

 if-match ip address acl 3001

 apply ip-address next-hop 172.16.216.2

#

route-policy 3 permit node 3

 if-match ip address acl 3002

 apply ip-address next-hop 10.7.0.246

#

 scheduler logfile size 16

#

line class aux

 user-role network-operator

#

line class console

 user-role network-admin

#

line class tty

 user-role network-operator

#

line class vty

 user-role network-operator

#

line aux 0

 user-role network-operator

#

line con 0

 user-role network-admin

#

line vty 0 4

 authentication-mode scheme

 user-role network-admin

 protocol inbound ssh

#

line vty 5 63

 user-role network-operator

#

 ip route-static 0.0.0.0 0 103.85.177.113

 ip route-static 0.0.0.0 0 172.16.216.1

 ip route-static 10.0.3.0 24 10.7.0.245

 ip route-static 10.0.66.0 24 10.7.0.245

 ip route-static 10.7.0.0 27 10.7.0.245

 ip route-static 10.7.0.32 27 10.7.0.245

 ip route-static 10.7.5.0 24 10.7.0.245

 ip route-static 10.7.32.0 27 10.7.0.245

 ip route-static 10.7.255.0 24 10.7.0.245

 ip route-static 10.66.3.0 24 10.7.0.245

 ip route-static 10.101.27.1 32 10.7.0.245

 ip route-static 172.16.4.0 22 172.16.0.1

 ip route-static 172.16.8.0 22 172.16.0.1

#

 ssh server enable

 ssh user admin service-type stelnet authentication-type password

#

acl basic 2000

 rule 0 permit

#

acl advanced 3000

 rule 10 permit ip source 172.16.0.0 0.0.4.255

#

acl advanced 3001

 rule 10 permit ip source 172.16.8.0 0.0.4.255

#

acl advanced 3002

 rule 5 permit ip source 172.16.0.0 0.0.8.255

 rule 10 permit ip source 172.16.8.0 0.0.4.255

#

domain system

#

 domain default enable system

#

role name level-0

 description Predefined level-0 role

#

role name level-1

 description Predefined level-1 role

#

role name level-2

 description Predefined level-2 role

#

role name level-3

 description Predefined level-3 role

#

role name level-4

 description Predefined level-4 role

#

role name level-5

 description Predefined level-5 role

#

role name level-6

 description Predefined level-6 role

#

role name level-7

 description Predefined level-7 role

#

role name level-8

 description Predefined level-8 role

#

role name level-9

 description Predefined level-9 role

#

role name level-10

 description Predefined level-10 role

#

role name level-11

 description Predefined level-11 role

#

role name level-12

 description Predefined level-12 role

#

role name level-13

 description Predefined level-13 role

#

role name level-14

 description Predefined level-14 role

#

user-group system

#

local-user admin class manage

 password hash $h$6$U+kEhQNvL/MF5FL8$ykiyganAhSH3foJIiZiG1zV76xyEF3Nc+X7EUDf/OTWt2hgT7Pfh8euABQZcZUtcYam+EOIU0gdpifanieq67A==

 service-type ssh

 authorization-attribute user-role level-15

 authorization-attribute user-role network-admin

#

local-user root class manage

 password hash $h$6$eURGumQ/2jeROm7f$5kSwEIMFn9EZcSx/IZ1wAziv7zbjMbBHwKp8VzSQVZr9c2/76qfZKcqx8km37vJWc/0U9ZhMqT+4AMWb7iT+/w==

 service-type ssh

 authorization-attribute user-role network-admin

 authorization-attribute user-role network-operator

#

return