问

s5120v3 version 7.1.070, Release 6343P05

2024-06-03提问

0关注
0收藏，231浏览

zhiliao_oJuSL

zhiliao_oJuSL 零段

粉丝：0人关注：0人

问题描述：

交换机配置了radius客户端链接华三的IMC认证。现在要配置ssh远程管理，配置后登录不上。

组网及组网描述：

dot1x

dot1x authentication-method eap

line vty 0 4

authentication-mode scheme

user-role level-15

user-role network-operator

set authentication password hash $h$6$QGsipWmjX/LauKrc$bM/NcxPQ841uIqElOS8YyRskpcmurnW4WxdbUQ+QiB+LAYWZ80g5wDwkdntjPpkHQWqMsDp8J6+nmVjRHv9GUg==

protocol inbound ssh

idle-timeout 60 0

ssh server enable

ssh user cjgly service-type stelnet authentication-type password

ssh user ejgly service-type stelnet authentication-type password

ssh user yjgly service-type stelnet authentication-type password

radius scheme h3c

primary authentication 15.23.5.1

primary accounting 15.23.5.1

key authentication cipher $c$3$Uu0S6KwHry8gb40bBjuJtJskE3RmOw==

key accounting cipher $c$3$A5Z5J4rWwQ9eo+Fu0CtlMR5g0zGODw==

retry 5

timer response-timeout 5

timer realtime-accounting 15

user-name-format without-domain

domain h3c

authentication default radius-scheme h3c

authorization default radius-scheme h3c

accounting default radius-scheme h3c

domain system

authentication default radius-scheme h3c

authorization default radius-scheme h3c

accounting default radius-scheme h3c

domain default enable h3c

local-user cjgly class manage

password hash $h$6$3qtij27MTaRo9MCF$Jn8tL0I1qrRuf4/m6OmN0h9XJyuPlIH9APX4REeFfunr7t7YRaMVYYnoZcF1YXMJAZzfUgN/dR7Am7e0bMefIw==

service-type ssh

authorization-attribute user-role level-15

authorization-attribute user-role network-operator

local-user clouduser class manage

password hash $h$6$SObWrov7vFOzxE6i$6lUfDgctKDeI2yvAz4r7uJduCAX+E5O1sdRCU6QSel2fRpRHD6eCGHgX2lve+UlHp3lWmyfTwNhItqnxTGl4JQ==

service-type http

authorization-attribute user-role network-admin

local-user ejgly class manage

password hash $h$6$ZlROJ4Y9v7VxdBH7$1Iw3kFHLWSfj1bnGV0jHSbS+hGrUHlVESUwoGqDxtKKcq04jOZwY9oziZR0rAJG4wkq/3AJYUzDRgBb+PXyV/w==

service-type ssh terminal

authorization-attribute user-role level-1

authorization-attribute user-role network-operator

local-user yjgly class manage

password hash $h$6$chlGJarClY6KpY3j$BBuXjY+cdMlbBpJoCyFGRxCxvSysw0XUkT2rJoRxfVl5g5H+aNoBwrHWvhOg2W5iW4KRfdr+3w+0fH16ENdCug==

service-type ssh terminal

authorization-attribute user-role level-7

authorization-attribute user-role network-operator

cloud-management server domain cloudnet.h3c.com

最佳答案

zhiliao_8h148y

zhiliao_8h148y 七段

粉丝：8人关注：0人

检查下imc侧吧

当前配置仅允许imc侧账户登陆了

另外imc的设备用户默认走的HWTACACS协议

检查下局点具体需求合理调整下配置吧

怎么配置ssh本地认证呢？不让ssh走imc认证。

zhiliao_oJuSL 发表时间：2024-06-03

回复zhiliao_oJuSL:

default rad相关配置改成default local或清空配置重新配。不做相关配置配置即可

zhiliao_8h148y 发表时间：2024-06-03

回复zhiliao_8h148y:

电脑客户端有dot1x认证，认证服务器是华三IMC，怎么能两个同时使用呢？do1x走IMC认证，ssh走本地认证？

zhiliao_oJuSL 发表时间：2024-06-03

回复zhiliao_oJuSL:

标准配置就行

zhiliao_8h148y 发表时间：2024-06-03

回复zhiliao_8h148y:

radius scheme h3c primary authentication 15.23.5.1 primary accounting 15.23.5.1 key authentication cipher $c$3$Uu0S6KwHry8gb40bBjuJtJskE3RmOw== key accounting cipher $c$3$A5Z5J4rWwQ9eo+Fu0CtlMR5g0zGODw== retry 5 timer response-timeout 5 timer realtime-accounting 15 user-name-format without-domain # domain h3c authentication default radius-scheme h3c authorization default radius-scheme h3c accounting default radius-scheme h3c # domain system authentication default radius-scheme h3c authorization default radius-scheme h3c accounting default radius-scheme h3c # 修改那些啊？

zhiliao_oJuSL 发表时间：2024-06-03