3Com MSR 50 Series, Руководство по настройке

Страница: 1943 / 2443

SSH Client Configuration Example 1943
[RouterB] interface ethernet 1/1
[RouterB-Ethernet1/1] ip address 10.165.87.136 255.255.255.0
[RouterB-Ethernet1/1] quit
# Set the authentication mode for the user interfaces to AAA.
[RouterB] user-interface vty 0 4
[RouterB-ui-vty0 4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[RouterB-ui-vty0 4] protocol inbound ssh
# Set the user command privilege level to 3.
[RouterB-ui-vty0 4] user privilege level 3
[RouterB-ui-vty0 4] quit
n
Before performing the following tasks, you must generate a DSA key pair (using
the client software) on the client, save the public key in a file named
key.pub , and
then upload the file to the SSH server through FTP or TFTP. For details, refer to
“SSH Client Configuration Example” on page 1940 .
# Import the remote public key pair from the file key.pub.
[RouterB] public-key peer Router001 import sshkey key.pub
# Specify the authentication type for user client002 as publickey , and assign the
public key Router001 for the user.
[RouterB] ssh user client002 service-type stelnet authentication-typ
e publickey assign publickey Router001
2
Configure the SSH client
# Configure an IP address for interface Ethernet 1/1.
<RouterA> system-view
[RouterA] interface ethernet 1/1
[RouterA-Ethernet1/1] ip address 10.165.87.137 255.255.255.0
[RouterA-Ethernet1/1] quit
# Generate a DSA key pair.
[RouterA] public-key local create dsa
# Export the DSA public key to the file key.pub .
[RouterA] public-key local export dsa ssh2 key.pub
[RouterA] quit
n
After generating a key pair on a client, you need to transmit the saved public key
file to the server through FTP or TFTP and have the configuration on the server
done before continuing configuration of the client.
# Establish an SSH connection to the server (10.165.87.136).