420 CHAPTER 36: SSH CONFIGURATION
# Create a VLAN interface on the switch and assign an IP address, which serves
as the SSH client’s address in an SSH connection.
<4210> system-view
[4210] interface vlan-interface 1
[4210-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[4210-Vlan-interface1] quit
# Generate a DSA key pair
[4210] public-key local create dsa
# Export the generated DSA host public key to a file named Switch001.
[4210] public-key local export dsa ssh2 Switch001
n
After the key pair is generated, you need to upload the pubic key file to the server
through FTP or TFTP and complete the server end configuration before you
continue to configure the client.
# Establish an SSH connection to the server 10.165.87.136.
[4210] ssh2 10.165.87.136 identity-key dsa
Username: client001
Trying 10.165.87.136 ...
Press CTRL+K to abort
Connected to 10.165.87.136 ...
The Server is not authenticated. Do you continue to access it?(Y/N):y
Do you want to save the server’s public key?(Y/N):n
*************************************************************************
* Copyright(c) 2004-2007 3Com Corporation *
* Without the owner’s prior written consent, *
* no decompiling or reverse-switch fabricering shall be allowed. *
*************************************************************************
<4210>
When the Switch Acts as
an SSH Client and
First-time authentication
is not Supported
Network requirements
As shown in Figure 145, establish an SSH connection between Switch A (SSH
Client) and Switch B (SSH Server) for secure data exchange. The user name is
client001 and the SSH server’s IP address is 10.165.87.136. The publickey
authentication mode is used to enhance security.
Network diagram
Figure 145 Network diagram of SSH client configuration
Configuration procedure
■ Configure Switch B
# Create a VLAN interface on the switch and assign an IP address for it to serve
as the destination of the client.
Switch B
SSH Server
Switch A
SSH ClientVLAN-Interface 1
10.165.87.137./24
10.165 .87.136 ./24
VLAN-Interface 1
To Next Page
Loading...
