S6520-24S-SI 新开局，配置SSH后无法登录。

<H3C>dis current-configuration # version 7.1.070, Release 6326 # sysname H3C # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # password-recovery enable # vlan 1 # interface NULL0 # interface M-GigabitEthernet0/0/0 ip address 172.16.3.254 255.255.0.0 # interface Ten-GigabitEthernet1/0/1 port link-mode bridge # interface Ten-GigabitEthernet1/0/2 port link-mode bridge # interface Ten-GigabitEthernet1/0/3 port link-mode bridge # interface Ten-GigabitEthernet1/0/4 port link-mode bridge # interface Ten-GigabitEthernet1/0/5 port link-mode bridge # interface Ten-GigabitEthernet1/0/6 port link-mode bridge # interface Ten-GigabitEthernet1/0/7 port link-mode bridge # interface Ten-GigabitEthernet1/0/8 port link-mode bridge # interface Ten-GigabitEthernet1/0/9 port link-mode bridge # interface Ten-GigabitEthernet1/0/10 port link-mode bridge # interface Ten-GigabitEthernet1/0/11 port link-mode bridge # interface Ten-GigabitEthernet1/0/12 port link-mode bridge # interface Ten-GigabitEthernet1/0/13 port link-mode bridge # interface Ten-GigabitEthernet1/0/14 port link-mode bridge # interface Ten-GigabitEthernet1/0/15 port link-mode bridge # interface Ten-GigabitEthernet1/0/16 port link-mode bridge # interface Ten-GigabitEthernet1/0/17 port link-mode bridge # interface Ten-GigabitEthernet1/0/18 port link-mode bridge # interface Ten-GigabitEthernet1/0/19 port link-mode bridge # interface Ten-GigabitEthernet1/0/20 port link-mode bridge # interface Ten-GigabitEthernet1/0/21 port link-mode bridge # interface Ten-GigabitEthernet1/0/22 port link-mode bridge # interface Ten-GigabitEthernet1/0/23 port link-mode bridge # interface Ten-GigabitEthernet1/0/24 port link-mode bridge # scheduler logfile size 16 # line class aux user-role network-admin # line class usb user-role network-admin # line class vty user-role network-operator # line aux 0 user-role network-admin # line vty 0 4 authentication-mode scheme user-role network-operator protocol inbound telnet # line vty 5 63 user-role network-operator # ip route-static 0.0.0.0 0 172.16.8.254 # ssh server enable # domain system # domain default enable system # role name level-0 description Predefined level-0 role # role name level-1 description Predefined level-1 role # role name level-2 description Predefined level-2 role # role name level-3 description Predefined level-3 role # role name level-4 description Predefined level-4 role # role name level-5 description Predefined level-5 role # role name level-6 description Predefined level-6 role # role name level-7 description Predefined level-7 role # role name level-8 description Predefined level-8 role # role name level-9 description Predefined level-9 role # role name level-10 description Predefined level-10 role # role name level-11 description Predefined level-11 role # role name level-12 description Predefined level-12 role # role name level-13 description Predefined level-13 role # role name level-14 description Predefined level-14 role # user-group system # local-user admin class manage password hash $h$6$/qyKRRkSFNIMrZ4P$HYnLFHRwZSweNYvpIKwvvEYofwf4UGnwUEboRU/smoFOwP4AhUsuqa0sMMGh8FbY4S0WQ5MQt7LOqoBqpJChWw== service-type telnet http https ssh authorization-attribute user-role network-admin authorization-attribute user-role network-operator # ip http enable ip https enable # return <H3C>

protocol inbound telnet 这个去掉

line vty 里这边限制了，不要配置这个，undo这个命令就行 undo protocol inbound telnet

之前是没有加telnet，后来因为ssh总是登录不上去才加的。是不是ssh加密的方式有问题？

把这个protocol inbound删掉，删掉还不行，就设备上创建下密钥 可参考这个链接：zhiliao.h3c.com/Theme/details/45644

[H3C]display ssh2 algorithm Key exchange algorithms: ecdh-sha2-nistp256 dh-group14-sha1 Public key algorithms: ecdsa-sha2-nistp256 x509v3-ecdsa-sha2-nistp256 rsa Encryption algorithms: aes128-ctr aes192-ctr aes256-ctr aes128-gcm aes256-gcm aes128-cbc 3des-cbc aes256-cbc des-cbc MAC algorithms: sha2-256 sha2-512 [H3C]

这个有问题吗

没有

最终下来只能用ssh -oHostKeyAlgorithms=+ssh-rsa这种方式ssh，交换机还有配置可以加吗？