H3C Technologies H3C WX3000 Series Unified Switches User Manual

Page 502

46-30

[device] user-interface vty 0 4

[device-ui-vty0-4] authentication-mode scheme

# Enable the user interfaces to support SSH.

[device-ui-vty0-4] protocol inbound ssh

[device-ui-vty0-4] quit

# Create local user “client001”, and set the authentication password to abc, the login protocol to SSH,
and user command privilege level to 3.

[device] local-user client001

[device-luser-client001] password simple abc

[device-luser-client001] service-type ssh level 3

[device-luser-client001] quit

# Configure the authentication type of user client001 as password.

[device] ssh user client001 authentication-type password

Configure Switch A

# Create a VLAN interface on the device and assign an IP address, which serves as the SSH client’s
address in an SSH connection.

system-view

[device] interface vlan-interface 1

[device-Vlan-interface1] ip address 10.165.87.137 255.255.255.0

[device-Vlan-interface1] quit

# Establish a connection to the server 10.165.87.136.

[device] ssh2 10.165.87.136

Username: client001

Trying 10.165.87.136 ...

Press CTRL+K to abort

Connected to 10.165.87.136 ...

The Server is not authenticated. Do you continue to access it?(Y/N):y

Do you want to save the server's public key?(Y/N):n

Enter password:

**************************************************************************

* Without the owner's prior written consent, *

* no decompiling or reverse-engineering shall be allowed. *

**************************************************************************

When the Device Acts as an SSH Client and the Authentication Type is Publickey

Network requirements

As shown in

Figure 47-24

, establish an SSH connection between Switch A (SSH Client) and Switch B

(SSH Server) for secure data exchange. The user name is client001 and the SSH server’s IP address is
10.165.87.136. Publickey authentication is required.