9 Telnet and SSH
Quidway NetEngine80
Configuration Guide - Basic Configurations
9-12
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Issue 04 (2009-12-20)
authentication-mode aaa
The AAA authentication mode is configured.
Step 4
Run:
protocol inbound ssh
The VTY is configured to support SSH.
----End
The authentication mode of the VTY user interface must be configured to AAA. Otherwise, the
protocol
inbound ssh
command cannot be configured successfully.
9.3.4 Generating a Local RSA Key Pair
Do as follows on the router that serves as the client and the server separately:
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
rsa local-key-pair create
A local RSA key pair is generated.
----End
To log in to the SSH server, the local RSA key pair must be configured and generated first. Before the
other configurations of SSH, you must configure the
rsa local-key-pair create
command to generate a
local key pair.
9.3.5 Configuring the Authentication Mode for SSH Users
Do as follows on the router:
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
ssh user
username
authentication-type
{
password
|
rsa
|
password-rsa
|
all
}
The authentication mode for SSH users is configured.
Perform the following as required:
z
Authenticate the SSH user through the password.
1.
Run:
ssh user
user-name
authentication-type password
