知

SR6600 系列路由器SSH2.0 server Public-key认证方式的配置方法

2011-07-07 发表

0关注
0收藏 2560浏览

张盛楠

张盛楠段

粉丝：人关注：人

一、组网需求：

PC 作为SSH2.0的client 登录 SR6608,SR6608 采用Public-key的认证方式，用户登录时不需手工输入用户名及密码就可以直接登录成功

设备版本：R2507P01

二、组网图：

三、配置步骤：

1．在PC上启用SSH 密钥生成器（案例中使用 puttygen.exe）生成主机认证所需要的公钥和私钥

2.选择生成SSH-2 类型的密钥点击Generate

3.鼠标在进度条下面的空白区域中滑动以产生随即密钥

4.密钥生成成功后点击Save public key 按钮，将公钥保存在.pub结尾的文件

5.点击 save private key 按钮将私钥（.pkk结尾）保存在PC上

6 将publickey.pub 文件上传到SR6608的cf卡中备用

7 配置SR6608路由器

SR6608配置

[H3C]public-key local create rsa

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

It will take a few minutes.

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

+++++++

++++++++++++

++++++++++

+++

[H3C]public-key local create dsa

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

It will take a few minutes.

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++.+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++.++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++.+++++++++++++++.++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++.+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*+++++++++++++

[H3C]ssh server enable

Info: Enable SSH server.

[H3C]public-key peer PC import sshkey cfa0:/publickey.pub //将PC上产生的公钥导入

[H3C]ssh user PC service-type stelnet authentication-type publickey assign publickey PC

[H3C]user-interface vty 0 4

[H3C-ui-vty0-4]authentication-mode scheme //配置登陆模式为SSH

[H3C-ui-vty0-4]protocol inbound ssh

[H3C-ui-vty0-4]user privilege level 3

8.使用SSH2.0的终端登录SR6608（案例中使用Putty）在session 中键入设备地址和端口号