S5600系列交换机作为SSH Client的配置

S5600系列交换机作为SSH Client的配置

 

一、组网需求：

1.       交换机Switch A作为SSH客户端，用户名client003；

2.       交换机Switch B作为SSH服务器，IP地址为10.165.87.136。

二、组网图

三、配置步骤：

1.       配置客户端对服务器进行首次认证。

[Quidway] ssh client first-time enable

2.       在客户端配置服务器公钥。

[SwitchA] rsa peer-public-key public

[SwitchA-rsa-public-key] public-key-code begin

[SwitchA-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463

[SwitchA-rsa-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913

[SwitchA-rsa-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4

[SwitchAy-rsa-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC

[SwitchA-rsa-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16

[SwitchA-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125

[SwitchA-rsa-key-code] public-key-code end

[SwitchA-rsa-public-key] peer-public-key end

[SwitchA] ssh client 10.165.87.136 assign rsa-key public

3.       启动SSH客户端。

下面分别按照服务器的两种认证方式进行配置。

（1）采用password认证，按照缺省的加密算法启动。

[SwitchA] ssh2 10.165.87.136

username: client003

Trying 10.165.87.136

Press CTRL+K to abort

Connected to 10.165.87.136...

The Server is not autherncated.Do you continue access it?(Y/N):y

Do you want to save the server's public key?(Y/N):y

Enter password:     

*********************************************************

*          All rights reserved (1997-2005)              *

*      Without the owner's prior written consent,       *

*no decompiling or reverse-engineering shall be allowed.*

*********************************************************

<SwitchA>

（2）采用RSA公钥认证，按照所设置的相应加密算法启动。

[SwitchA] ssh2 10.165.87.136 22 perfer_kex dh_group1 perfer_ctos_cipher des perfer_ctos_hmac md5 perfer_stoc_hmac md5

username: client003

Trying 10.165.87.136...

Press CTRL+K to abort

Connected to 10.165.87.136...

The Server is not autherncated.Do you continue access it?(Y/N):y

Do you want to save the server's public key?(Y/N):y

*********************************************************

*          All rights reserved (1997-2005)              *

*      Without the owner's prior written consent,       *

*no decompiling or reverse-engineering shall be allowed.*

*********************************************************

<SwitchA>

四、配置关键点：

无