H3C Technologies H3C SecBlade LB Cards - Manual (Page 183)

172
Configuration procedure
1. Configure the Stelnet server:
# Generate the RSA key pairs.
system-view
[LB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++
++++++++++++++
+++++
++++++++
# Enable the SSH server function.
[LB] ssh server enable
# Configure an IP address for interface GigabitEthernet 0/1. The Stelnet client uses this IP address
as the destination for SSH connection.
[LB] interface gigabitethernet 0/1
[LB-GigabitEthernet0/1] ip address 192.168.1.40 255.255.255.0
[LB-GigabitEthernet0/1] quit
# Set the authentication mode for the user interface to AAA.
[LB] user-interface vty 0 4
[LB-ui-vty0-4] authentication-mode scheme
# Enable the user interface to support SSH.
[LB-ui-vty0-4] protocol inbound ssh
[LB-ui-vty0-4] quit
# Create a local user client001 with the password as aabbcc and service type as ssh.
[LB] local-user client001
[LB-luser-client001] password simple aabbcc
[LB-luser-client001] service-type ssh
[LB-luser-client001] quit
# Specify the service type for the user client001 as stelnet, and the authentication method as
password. (Optional. If an SSH user is not created, password authentication is used by default.)
[LB] ssh user client001 service-type stelnet authentication-type password
2. Establish a connection to the Stelnet server:
The device supports different types of Stelnet client software, such as PuTTY, and OpenSSH. The
following example takes PuTTY version 0.58 on the Stelnet client.
To establish a connection to the Stelnet server:
a. Launch PuTTY.exe to enter the following interface.
b. In the Host Name (or IP address) field, enter the IP address of the Stelnet server.