beautypg.com

H3C Technologies H3C SecPath F1000-E User Manual

Page 69

background image

13

[Device] ssh server enable

# Configure an IP address for interface GigabitEthernet 0/1, which the SSH client will use as the

destination for SSH connection.

[Device] interface gigabitethernet 0/1

[Device-GigabitEthernet0/1] ip address 192.168.1.40 255.255.255.0

[Device-GigabitEthernet0/1] quit

# Set the authentication mode for the user interfaces to AAA.

[Device] user-interface vty 0 4

[Device-ui-vty0-4] authentication-mode scheme

# Enable the user interfaces to support SSH.

[Device-ui-vty0-4] protocol inbound ssh

[Device-ui-vty0-4] quit

# Create local user client001, and set the user command privilege level to 3.

[Device] local-user client001

[Device-luser-client001] password simple aabbcc

[Device-luser-client001] service-type ssh

[Device-luser-client001] authorization-attribute level 3

[Device-luser-client001] quit

# Specify the service type for user client001 as Stelnet, and the authentication method as password.

This step is optional.

[Device] ssh user client001 service-type stelnet authentication-type password

Step2

Establish a connection between the SSH client and SSH server

NOTE:

There are a variety of SSH client software, such as PuTTY, and OpenSSH. The following is an example of
configuring SSH client using PuTTY Version 0.58.

# Establish a connection to the SSH server.
Launch PuTTY.exe to enter the following interface. In the Host Name (or IP address) text box, enter

the IP address of the server.