30
Figure 22
SSH login diagram
Telnet client
Telnet server
IP network
The following table shows the configuration requirements of SSH login.
Object Requirements
Configure the IP address of the management Ethernet interface, and make sure the SSH
server and client can reach each other.( By default, the IP address of the management
Ethernet interface is 192.168.0.1/24.)
SSH server
Configure the authentication mode and other settings.
If the host operates as an SSH client, run the SSH client program on the host.
SSH client
Obtain the IP address of the management Ethernet interface of the device
By default, the device is enabled with the SSH server and client functions.
•
On a device that serves as the SSH client, you can log in to an SSH server to perform operations on
the server.
•
On a device that serves as the SSH server, you can configure the authentication mode and user level
for SSH users. By default, password authentication is adopted for SSH login, but no login password
is configured, so you cannot log in to the device through SSH by default. Before you can log in to
the device through SSH, you need to log in to the device through the console port and configure the
authentication mode, user level, and common settings.
This section includes these topics:
•
•
Configuring the SSH client to log in to the SSH server
Configuring the SSH server
Configuration prerequisites
You have logged in to the device, and want to log in to the device through SSH in the future.
By default, you can log in to the device through the console port without authentication and have user
privilege level 3 after login. For information about logging in to the device with the default configuration,
see “
.”
Configuration procedure
Follow these steps to configure the device that serves as an SSH server:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create local key pair(s)
public-key local create
{
dsa
|
rsa
}
Required
By default, no local key pair(s) are created.
Enable SSH server
ssh server enable
Required
By default, SSH server is disabled.
