18
Step Command
Remarks
10.
Apply an AAA authentication
scheme to the intended
domain.
a.
Enter the ISP domain view:
domain
domain-name
b.
Apply the specified AAA
scheme to the domain:
authentication default
{
hwtacacs-scheme
hwtacacs-scheme-name
[
local
] |
local
|
none
|
radius-scheme
radius-scheme-name
[
local
] }
c.
Exit to system view:
quit
Optional.
For local authentication, configure
local user accounts.
For RADIUS or HWTACACS
authentication, configure the
RADIUS or HWTACACS scheme
on the device and configure
authentication settings (including
the username and password) on
the server.
For more information about AAA
configuration, see
Security
Configuration Guide
.
11.
Create a local user and enter
local user view.
local-user
user-name
N/A
12.
Set a password for the local
user.
password
{
cipher
|
simple
}
password
N/A
13.
Specify the command level of
the user.
authorization-attribute level
level
Optional.
14.
Specify SSH service for the
user.
service-type
ssh
N/A
15.
Exit to system view.
quit
N/A
16.
Create an SSH user, and
specify the authentication
mode for the SSH user.
ssh user
username
service-type
stelnet authentication-type
{
password
| {
any
|
password-publickey
|
publickey
}
assign
publickey
keyname
}
N/A
17.
Configure common settings
for VTY user interfaces.
See "
user interface settings (optional)
Optional.
Using the device to log in to an SSH server
You can use the device as an SSH client to log in to an SSH server. If the server is located in a different
subnet than the device, make sure the two devices have routes to reach each other.
Figure 8
Logging in to an SSH server from the device
Perform the following tasks in user view:
Task Command
Remarks
Log in to an IPv4 SSH server.
ssh2
server
The
server
argument represents the IPv4 address or
host name of the server.
