SSH
H3C Low-End Ethernet Switches Configuration Examples
Chapter 3 SSH Configuration Example
3-17
<H3C>
3.1.5 When the Switch Acts as an SSH Client and First-time authentication is
not Supported
I. Network requirements
As shown inFigure 3-16, establish an SSH connection between Switch A (SSH Client)
and Switch B (SSH Server) for secure data exchange. The user name is client001 and
the SSH server’s IP address is 10.165.87.136. The
RSA
authentication mode is used
to enhance security.
II. Network diagram
Figure 3-16
Network diagram of SSH client configuration
III. Configuration procedure
1)
Configure Switch B
# Create a VLAN interface on the switch and assign an IP address for it to serve as the
destination of the client.
<H3C> system-view
[H3C] interface vlan-interface 1
[H3C-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[H3C-Vlan-interface1] quit
# Generate RSA key pairs.
[H3C] rsa local-key-pair create
# Set AAA authentication on user interfaces.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Configure the user interfaces to support SSH.
[H3C-ui-vty0-4] protocol inbound ssh
# Set the user command privilege level to 3.
[H3C-ui-vty0-4] user privilege level 3
[H3C-ui-vty0-4] quit
