1128 CHAPTER 88: SSH CONFIGURATION
[SwitchB] interface vlan-interface 1
[SwitchB-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[SwitchB-Vlan-interface1] quit
# Set the authentication mode for the user interface to AAA.
[SwitchB] user-interface vty 0 4
[SwitchB-ui-vty0-4] authentication-mode scheme
# Enable the user interface to support SSH.
[SwitchB-ui-vty0-4] protocol inbound ssh
# Set the user command privilege level to 3.
[SwitchB-ui-vty0-4] user privilege level 3
[SwitchB-ui-vty0-4] quit
n
Before performing the following tasks, you must generate a DSA public key pair
(using the client software) on the client, save the key pair in a file named key.pub,
and then upload the file to the SSH server through FTP or TFTP. For details, refer to
“Configuring the Device as an SSH Client” on page 1115.
# Import the remote public key pair from the file “key.pub”.
[SwitchB] public-key peer Switch001 import sshkey key.pub
# Specify the authentication type for user “client002” as publickey, and assign the
public key “Switch001” for the user.
[SwitchB] ssh user client002 service-type stelnet authentication-type publickey assign publickey Switch001
2 Configure the SSH client
# Configure an IP address for Vlan interface 1.
<SwitchA> system-view
[SwitchA] interface vlan-interface 1
[SwitchA-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[SwitchA-Vlan-interface1] quit
# Generate a DSA key pair.
[SwitchA] public-key local create dsa
# Export the DSA key pair to the file key.pub.
[SwitchA] public-key local export dsa ssh2 key.pub
[SwitchA] quit
n
After generating a key pair on a client, you need to transmit the saved public key
file to the server through FTP or TFTP and have the configuration on the server
done before continuing configuration of the client.
# Establish an SSH connection to the server (10.165.87.136).
<SwitchA> ssh2 10.165.87.136
Username: client002
Trying 10.165.87.136 ...
Press CTRL+K to abort
Connected to 10.165.87.136 ...
The Server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:n
**************************************************************************
* Copyright(c) 2004-2008 3Com Corporation. All rights reserved. *
* Without the owner’s prior written consent, *
* no decompiling or reverse-switch fabricering shall be allowed. *
To Next Page
Loading...
