beautypg.com

Configuration procedure – H3C Technologies H3C WX6000 Series Access Controllers User Manual

Page 625

background image

64-20

Configuration procedure

1) Configure the SSH server

# Create an RSA and DSA key pair and enable the SSH server.

system-view

[Switch] public-key local create rsa

[Switch] public-key local create dsa

[Switch] ssh server enable

# Create an IP address for VLAN interface 1, which the SSH client will use as the destination for SSH
connection.

[Switch] interface vlan-interface 1

[Switch-Vlan-interface1] ip address 10.165.87.136 255.255.255.0

[Switch-Vlan-interface1] quit

# Set the authentication mode for the user interface to AAA.

[Switch] user-interface vty 0 4

[Switch-ui-vty0-4] authentication-mode scheme

# Enable the user interface to support SSH.

[Switch-ui-vty0-4] protocol inbound ssh

[Switch-ui-vty0-4] quit

# Create local user client001.

[Switch] local-user client001

[Switch-luser-client001] password simple aabbcc

[Switch-luser-client001] service-type ssh level 3

[Switch-luser-client001] quit

# Specify the service type for user “client001” as Stelnet, and the authentication method as password.

[Switch] ssh user client001 service-type stelnet authentication-type password

2) Configure the SSH client

# Configure an IP address for VLAN interface 1.

system-view

[AC] interface vlan-interface 1

[AC-Vlan-interface1] ip address 10.165.87.137 255.255.255.0

[AC-Vlan-interface1] quit

# Disable first-time authentication.

[AC] undo ssh client first-time

# Configure the host public key of the SSH server.

[AC] public-key peer key1

[AC-pkey-public-key] public-key-code begin

[AC-pkey-key-code]308201B73082012C06072A8648CE3804013082011F0281810

0D757262C4584C44C211F18BD96E5F0

[AC-pkey-key-code]61C4F0A423F7FE6B6B85B34CEF72CE14A0D3A5222FE08CECE

65BE6C265854889DC1EDBD13EC8B274

[AC-pkey-key-code]DA9F75BA26CCB987723602787E922BA84421F22C3C89CB9B0

6FD60FE01941DDD77FE6B12893DA76E

[AC-pkey-key-code]EBC1D128D97F0678D7722B5341C8506F358214B16A2FAC4B3

68950387811C7DA33021500C773218C

[AC-pkey-key-code]737EC8EE993B4F2DED30F48EDACE915F0281810082269009E

14EC474BAF2932E69D3B1F18517AD95

[AC-pkey-key-code]94184CCDFCEAE96EC4D5EF93133E84B47093C52B20CD35D02

492B3959EC6499625BC4FA5082E22C5