Operation Manual – SSH
H3C S3100 Series Ethernet Switches Chapter 1 SSH Configuration
1-7
1.3.1 Configuring the User Interfaces for SSH Clients
An SSH client accesses the device through a VTY user interface. Therefore, you need
to configure the user interfaces for SSH clients to allow SSH login. Note that the
configuration takes effect at the next login.
Table 1-3 Follow these steps to configure the user interface for SSH clients:
To do... Use the command... Remarks
Enter system view
system-view
—
Enter user interface
view of one or more
user interfaces
user-interface vty
first-number [ last-number ]
—
Configure the
authentication mode
as scheme
authentication-mode
scheme
[ command-authorization ]
Required
By default, the user
interface authentication
mode is password.
Specify the supported
protocol(s)
protocol inbound { all |ssh |
telnet }
Optional
By default, both Telnet
and SSH are supported.
Caution:
z If you have configured a user interface to support SSH protocol, you must configure
AAA authentication for the user interface by using the authentication-mode
scheme command to ensure successful login.
z On a user interface, if the authentication-mode password or
authentication-mode none command has been executed, the protocol inbound
ssh command is not available. Similarly, if the protocol inbound ssh command
has been executed, the authentication-mode password and
authentication-mode none commands are not available.
1.3.2 Configuring the SSH Management Functions
The SSH server provides a number of management functions. Some functions can
prevent illegal operations such as malicious password guess, further guaranteeing the
security of SSH connections.