SSH是在传统Telnet协议的基础之上发展起来的一种安全的远程登录协议。相比于Telnet,SSH无论是在认证方式或数据传输的安全性上,都有很大的提高。
生成本地密钥对
[Huawei]rsa local-key-pair create The key name will be: Huawei_Host The range of public key size is (512 ~ 2048). NOTES: If the key modulus is greater than 512, it will take a few minutes. Input the bits in the modulus[default = 512]:1024 //rsa的运算模数 Generating keys... ............................++++++ ...++++++ ..++++++++ ......++++++++
配置VTY用户界面
[Huawei]user-interface vty 0 4 [Huawei-ui-vty0-4]authentication-mode aaa [Huawei-ui-vty0-4]protocol inbound ssh [Huawei-ui-vty0-4]q
创建SSH用户,并配置用户的认证方式为password
[Huawei]ssh user arthur authenticcation-type password
配置SSH用户的用户名和密码
[Huawei]aaa [Huawei-aaa]local-user shxke password cipher shxke Info: Add a new user. [Huawei-aaa]local-user shxke privilege level 3 [Huawei-aaa]local-user shxke service-type ssh [Huawei-aaa]quit
使能STelent功能,并配置用户的服务类型为STelnet
[Huawei]stelnet server enable Info: Succeeded in starting the Stelnet server. [Huawei]ssh user shxke service-type stelnet



