Operation Manual – SSH
H3C S3100 Series Ethernet Switches
Chapter 1 SSH Configuration
1-11
Caution:
z
For
password
authentication type, the
username
argument must be consistent with
the valid user name defined in AAA; for publickey authentication, the
username
argument is the SSH local user name, so that there is no need to configure a local
user in AAA.
z
If the default authentication type for SSH users is
password
and local AAA
authentication is adopted, you need not use the
ssh user
command to create an
SSH user. Instead, you can use the
local-user
command to create a user name
and its password and then set the service type of the user to SSH.
z
If the default authentication type for SSH users is password and remote
authentication (RADIUS authentication, for example) is adopted, you need not use
the
ssh user
command to create an SSH user, because it is created on the remote
server. And the user can use its username and password configured on the remote
server to access the network.
z
Under the
publickey
authentication mode, the level of commands available to a
logged-in SSH user can be configured using the
user privilege level
command on
the server, and all the users with this authentication mode will enjoy this level.
z
Under the
password
or
password-publickey
authentication mode, the level of
commands available to a logged-in SSH user is determined by the AAA scheme.
Meanwhile, for different users, the available levels of commands are also different.
z
Under the
all
authentication mode, the level of commands available to a logged-in
SSH user is determined by the actual authentication method used for the user.
1.3.6 Specifying a Service Type for an SSH User
Table 1-7
Follow these steps to specify the service type for an SSH user:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Specify a service type for
an SSH user
ssh user username
service-type
{
stelnet
|
sftp
|
all
}
Required
By default, an SSH user
can use the service type
of
stelnet
.
