Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Huawei and H3C devices enable ssh login

2025-01-16 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Huawei devices enable ssh login to generate local key pairs on the server side: system-view [HUAWEI] sysname SSH Server [SSH Server] rsa local-key-pair createThe key name will be: SSH Server_HostThe range of public key size is (512-2048) .NOTES: If the key modulus is greater than 512 It will take a few minutes.Input the bits in the modulus [default = 2048]: 2048Generating keys.+...+

* * 2. Create a SSH user on the server side

# configure the VTY user interface.

[SSH Server] user-interface vty0 4 [SSH Server-ui-vty0-4] authentication-mode aaa [SSH Server-ui-vty0-4] protocol inbound ssh [SSH Server-ui-vty0-4] quit

* * create SSH user client001.

# create a new SSH user whose username is client001, and the authentication method is password.

[SSH Server] aaa [SSH Server-aaa] local-user client001 password irreversible-cipher Huawei@123 [SSH Server-aaa] local-user client001 privilege level 3 [SSH Server-aaa] local-user client001 service-type ssh [SSH Server-aaa] quit [SSH Server] ssh user client001 authentication-type password

3. Enable the STelnet service function on SSH server

# enable STelnet service function.

[SSH Server] stelnet server enable

4. Configure the service mode of SSH users client001 and client002 to STelnet

[SSH Server] ssh user client001 service-type stelnet

Reference: http://forum.huawei.com/enterprise//zh/thread-334309.html

H3C S5800-32C device enables ssh login

Create a vlan interface on the switch and assign an IP address to it as the address for the client to connect to the ssh server.

System- view[H3C] interface Vlan-interface1 [H3C-Vlan-interface1] ip add 192.168.0.1 255.255.255.0 [H3C-Vlan-interface1] quit

Generate RSA key pair

[H3C] public-key local create rsa

Set the authentication mode on the user interface to AAA authentication.

[H3C] user-interface vty0 4 [H3C-ui-vty0-4] authentication-mode scheme

Ssh protocol is supported on the set user interface.

[H3C-ui-vty0-4] protocol inbound all [H3C-ui-vty0-4] quit

Create user ssh-user, set the authentication password to abc, login protocol to SSH, and the command level that can be accessed is 3.

[H3C] local-user ssh-user [H3C-luser-ssh-user] password cipher abc [H3C-luser-ssh-user] service-type ssh [H3C-luser-ssh-user] authorization-attribute level 3 [H3C-luser-ssh-user] quit

Specify that the authentication method of ssh-user is password authentication, and enable the ssh service.

[H3C] ssh user ssh-user service-type stelnet authentication-type password[H3C] ssh server enable

Reference: http://www.h4c.com/cn/d_200808/614453_30005_0.htm#_Toc205610951

Http://www.h4c.com/cn/d_201706/1003748_30005_0.htm#_Toc485632771

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report