ssh配置

Host（SSH客户端）与Router建立本地连接。Host采用SSH协议登录到Router上，以保证数据信息交换的安全。此处采用的认证方式为password认证，用户名和密码保存在Router上。

1.  设备作为SSH服务器端设置

# 生成RSA密钥对。

<H3C>system-view  

System View: return to User View with Ctrl+Z.

[H3C]public-key local create rsa

The range of public key size is (512 ~ 2048).     

NOTES: If the key modulus is greater than 512,     

It will take a few minutes.    

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

++++++++++++++++++++++++++++++++++++++

+++++++++++

+++++++++++++

+++

# 生成DSA密钥对。

[H3C]public-key local create dsa

The range of public key size is (512 ~ 2048).     

NOTES: If the key modulus is greater than 512,     

It will take a few minutes.    

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*+++++++++++++

# 启动SSH服务器。

[H3C]ssh server enable

# 配置VLAN虚接口Vlan-interface 1的IP地址为192.168.1.1，此地址作为SSH服务器的登录地址。

[H3C]interface Vlan-interface 1

[H3C-Vlan-interface1] ip address 192.168.1.1 255.255.255.0

[H3C-Vlan-interface1]quit

# 设置SSH客户端登录用户界面的认证方式为password认证。

[H3C] line vty 0 4  

[H3C-line-vty0-4]authentication-mode scheme

# 设置Router上远程用户登录协议为SSH。

[H3C-line-vty0-4]protocol inbound ssh

[H3C-line-vty0-4]quit

# 创建本地用户client001，密码为aabbcc，并设置用户访问的命令级别为最高级别3。

[H3C] local-user client001 class manage

[H3C-luser-manage-client001]password simple aabbcc

[H3C-luser-manage-client001]service-type ssh

[H3C-luser-manage-client001] authorization-attribute user-role network-admin

[H3C-luser-manage-client001]quit

# 配置SSH用户client001的服务类型为Stelnet，认证方式为password认证（此步骤非必配）。

[H3C]ssh user client001 service-type stelnet authentication-type password

#保存配置

[H3C]save force