H3C SR6600 SPE-FWM, Руководство по базовой конфигурации

Страница: 59 / 184

3-48
Object Requirements
Configure the IP address of the interface, and make sure the SSH server and
client can reach each other.
SSH server
Configure the authentication mode and other settings.
Run the SSH client program.
SSH client
Obtain the IP address of the interface on the server.
By default, the device is enabled with the SSH server and client functions.
z
On a device that serves as the SSH client, you can log in to an SSH server to perform operations
on the server.
z
On a device that serves as the SSH server, you can configure the authentication mode and user
level for SSH users. By default, password authentication is adopted for SSH login, but no login
password is configured. Therefore, you cannot log in to the device through SSH by default. Before
you can log in to the device through SSH, you need to log in to the device through the console port
and configure the authentication mode, user level, and common settings.
This section includes these topics:
z
Configuring the SSH Server
z
Configuring the SSH Client
Configuring the SSH Server
Configuration prerequisites
You have logged in to the device, and want to log in to the device through SSH in the future.
By default, you can log in to the device through the console port without authentication and have user
privilege level 3 after login. For how to log in to the device with default configuration, see Configuration
Requirements .
Configuration procedure
Follow these steps to configure the device that serves as an SSH server:
To do… Use the command… Remarks
Enters system view system-view —
Create local key pair(s)
public-key local create { dsa |
rsa }
Required
By default, no local key pair(s) are
created.
Enable SSH server ssh server enable
Required
By default, SSH server is disabled.
Exit to system view quit —
Enter one or more VTY user
interface views
user-interface vty
first - number
[ last-number ]
—
Specify the scheme authentication
mode
authentication-mode scheme
Required
By default, authentication mode for
VTY user interfaces is
password .
Enable the current user interface to
support either Telnet, SSH, or both
of them
protocol inbound { all | ssh }
Optional
By default, both protocols are
supported.