H3C S5120-EI Series, Руководство по эксплуатации

Страница: 644 / 1191

1-16
Figure 1-7
Save a key pair on the client 4)
Then, you need to transmit the public key file to the server through FTP or TFTP.
2) Configure the SSH server
# Generate RSA and DSA key pairs and enable SSH server.
<Switch> system-view
[Switch] public-key local create rsa
[Switch] public-key local create dsa
[Switch] ssh server enable
# Configure an IP address for VLAN interface 1. This address will serve as the destination of the SSH
connection.
[Switch] interface vlan-interface 1
[Switch-Vlan-interface1] ip address 192.168.1.40 255.255.255.0
[Switch-Vlan-interface1] quit
# Set the authentication mode for the user interfaces to AAA.
[Switch] user-interface vty 0 4
[Switch-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[Switch-ui-vty0-4] protocol inbound ssh
# Set the user command privilege level to 3.
[Switch-ui-vty0-4] user privilege level 3
[Switch-ui-vty0-4] quit
# Import the client’s public key from file
key.pub
and name it
Switch001
.
[Switch] public-key peer Switch001 import sshkey key.pub
# Specify the authentication type for user
client002
as publickey, and assign the public key
Switch001
to the user.
[Switch] ssh user client002 service-type stelnet authentication-type publickey assign
publickey Switch001
3) Establish a connection between the SSH client and the SSH server
# Specify the private key file and establish a connection with the SSH server
Launch PuTTY.exe to enter the following interface. In the
Host Name (or IP address)
text box, enter
the IP address of the server (192.168.1.40).