ssh远程安全访问路由器

网络拓扑图

配置

路由器R2的配置：

sysname ssh

stelnet server enable

aaa
authentication-scheme test1
authorization-scheme test2
domain student
authentication-scheme test1
authorization-scheme test2

local-user test1@student password cipher 123456
local-user test1@student privilege level 3
local-user test1@student service-type ssh
local-user test2@student password cipher 123456
local-user test2@student privilege level 3
local-user test2@student service-type ssh

interface GigabitEthernet0/0/0
ip address 200.1.1.2 255.255.255.0

interface GigabitEthernet0/0/1
ip address 201.1.1.2 255.255.255.0

user-interface vty 0 4
authentication-mode aaa
protocol inbound ssh

路由器R1的配置：

sysname client1

interface GigabitEthernet0/0/0
ip address 200.1.1.1 255.255.255.0

ssh client first-time enable

远程登录：
stelnet 200.1.1.2

路由器R3的配置：

sysname client2

interface GigabitEthernet0/0/0
ip address 201.1.1.1 255.255.255.0

ssh client first-time enable

远程登录：
stelnet 200.1.1.2

登录成功界面