交换机配置了radius客户端链接华三的IMC认证。现在要配置ssh远程管理,配置后登录不上。
#
dot1x
dot1x authentication-method eap
#
#
line vty 0 4
authentication-mode scheme
user-role level-15
user-role network-operator
set authentication password hash $h$6$QGsipWmjX/LauKrc$bM/NcxPQ841uIqElOS8YyRskpcmurnW4WxdbUQ+QiB+LAYWZ80g5wDwkdntjPpkHQWqMsDp8J6+nmVjRHv9GUg==
protocol inbound ssh
idle-timeout 60 0
#
#
ssh server enable
ssh user cjgly service-type stelnet authentication-type password
ssh user ejgly service-type stelnet authentication-type password
ssh user yjgly service-type stelnet authentication-type password
#
radius scheme h3c
primary authentication 15.23.5.1
primary accounting 15.23.5.1
key authentication cipher $c$3$Uu0S6KwHry8gb40bBjuJtJskE3RmOw==
key accounting cipher $c$3$A5Z5J4rWwQ9eo+Fu0CtlMR5g0zGODw==
retry 5
timer response-timeout 5
timer realtime-accounting 15
user-name-format without-domain
#
domain h3c
authentication default radius-scheme h3c
authorization default radius-scheme h3c
accounting default radius-scheme h3c
#
domain system
authentication default radius-scheme h3c
authorization default radius-scheme h3c
accounting default radius-scheme h3c
#
domain default enable h3c
#
#
local-user cjgly class manage
password hash $h$6$3qtij27MTaRo9MCF$Jn8tL0I1qrRuf4/m6OmN0h9XJyuPlIH9APX4REeFfunr7t7YRaMVYYnoZcF1YXMJAZzfUgN/dR7Am7e0bMefIw==
service-type ssh
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
local-user clouduser class manage
password hash $h$6$SObWrov7vFOzxE6i$6lUfDgctKDeI2yvAz4r7uJduCAX+E5O1sdRCU6QSel2fRpRHD6eCGHgX2lve+UlHp3lWmyfTwNhItqnxTGl4JQ==
service-type http
authorization-attribute user-role network-admin
#
local-user ejgly class manage
password hash $h$6$ZlROJ4Y9v7VxdBH7$1Iw3kFHLWSfj1bnGV0jHSbS+hGrUHlVESUwoGqDxtKKcq04jOZwY9oziZR0rAJG4wkq/3AJYUzDRgBb+PXyV/w==
service-type ssh terminal
authorization-attribute user-role level-1
authorization-attribute user-role network-operator
#
local-user yjgly class manage
password hash $h$6$chlGJarClY6KpY3j$BBuXjY+cdMlbBpJoCyFGRxCxvSysw0XUkT2rJoRxfVl5g5H+aNoBwrHWvhOg2W5iW4KRfdr+3w+0fH16ENdCug==
service-type ssh terminal
authorization-attribute user-role level-7
authorization-attribute user-role network-operator
#
cloud-management server domain cloudnet.h3c.com
#
(0)
最佳答案
检查下imc侧吧
(0)
怎么配置ssh本地认证呢?不让ssh走imc认证。
电脑客户端有dot1x认证,认证服务器是华三IMC,怎么能两个同时使用呢?do1x走IMC认证,ssh走本地认证?
radius scheme h3c primary authentication 15.23.5.1 primary accounting 15.23.5.1 key authentication cipher $c$3$Uu0S6KwHry8gb40bBjuJtJskE3RmOw== key accounting cipher $c$3$A5Z5J4rWwQ9eo+Fu0CtlMR5g0zGODw== retry 5 timer response-timeout 5 timer realtime-accounting 15 user-name-format without-domain # domain h3c authentication default radius-scheme h3c authorization default radius-scheme h3c accounting default radius-scheme h3c # domain system authentication default radius-scheme h3c authorization default radius-scheme h3c accounting default radius-scheme h3c # 修改那些啊?
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
radius scheme h3c primary authentication 15.23.5.1 primary accounting 15.23.5.1 key authentication cipher $c$3$Uu0S6KwHry8gb40bBjuJtJskE3RmOw== key accounting cipher $c$3$A5Z5J4rWwQ9eo+Fu0CtlMR5g0zGODw== retry 5 timer response-timeout 5 timer realtime-accounting 15 user-name-format without-domain # domain h3c authentication default radius-scheme h3c authorization default radius-scheme h3c accounting default radius-scheme h3c # domain system authentication default radius-scheme h3c authorization default radius-scheme h3c accounting default radius-scheme h3c # 修改那些啊?