9 Telnet and SSH
Quidway NetEngine80
Configuration Guide - Basic Configurations
9-22
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 04 (2009-12-20)
Before the peer RSA public key is assigned to the SSH server, the SSH client must be configured and the
assigned RSA public key must be the RSA public key of the SSH server. Thus, the STelnet or SFTP
client can pass the validity check on the RSA public key of the SSH server.
9.5.4 Enabling the STelnet Client
Do as follows on the router that serves as the SSH client:
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
stelnet
[
-a
source-address
]
host-ipv4
[
port
] [ [
prefer_kex
{
dh_group1
|
dh_exchange_group
} ]
|
[
prefer_ctos_cipher
{
des
|
3des
|
aes128
} ] |
[
prefer_stoc_cipher
{
des
|
3des
|
aes128
} ] |
[
prefer_ctos_hmac
{
sha1
|
sha1_96
|
md5
|
md5_96
} ]
| [
prefer_stoc_hmac
{
sha1
|
sha1_96
|
md5
|
md5_96
} ] |
[ -vpn-instance
vpn-instance-name
]
] command. You can log in to the SSH server through STELNET.
----End
When accessing the SSH server, the STelnet client can carry the source address and the name of the
VPN instance and choose the key exchange algorithm, encrypted algorithm, and HMAC algorithm.
9.5.5 Checking the Configuration
Run the following commands to check the previous configuration.
Action
Command
Check the mapping between the RSA
public key and the SSH client on the SSH
client.
display ssh server-info
Check the session of the SSH client on
the SSH server.
display ssh server session
When running the
display ssh server session
command, you can view that the client logs in
from VTY3, with
stelent
service by
password
authentication.
<Quidway>
display ssh server session
Session 1:
Conn :
VTY 3
Version : 2.0
State : started
Username : client001
Retry : 1
CTOS Cipher : aes128-cbc
STOC Cipher : aes128-cbc
CTOS Hmac : hmac-sha1-96
STOC Hmac : hmac-sha1-96
