华为交换机SSH登录配置

【配置思路】
1.在本地的SSH服务端生成本地需要的密钥对
2.SSH服务端配置用户的账号、密码、权限
3.做通用户和SSH服务端的通信

设备型号：S5700-EI

1. 创建本地密钥对

[CORE]   rsa local-key-pair create             #创建本地密钥对
The key name will be: SW1_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:1024
Generating keys...
.................++++++++++++
......................++++++++++++
..............++++++++
.........++++++++

2. 配置VTY用户，只能用SSH进入

[CORE]user-interface vty 0 4 
[CORE-ui-vty0-4]authentication-mode aaa 
[CORE-ui-vty0-4]protocol inbound ssh

3. 创建SSH用户及密码

#aaa
#local-user NAME password cipher 123456
#local-user NAME privilege level 3
#local-user NAME service-type ssh

4. 配置ssh用户的认证方式和服务方式

[CORE] ssh user NAME authentication-type password
[CORE] ssh user NAME service-type {sftp | stelnet | all } 
[CORE] stelnet server enable               #打开ssh服务

5. 设置只能管理网段访问

新建ACL2000
acl 2000
rule 5 permit source 192.168.101.0       0.0.0.255
rule deny

ACL应用到远程，只允许acl网段访问
user-interface vty 0 4
protocol inbound ssh
acl 2000 inbound