ssh方式登录huawei设备

1.要求

创建user1账号，密码huawei@123,用户级别 3，只能以ssh方式登录

2.拓扑图

3.配置

AR1

sys
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 1.1.1.2 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]un in en
[Huawei]aaa
[Huawei-aaa]local-user user1 password cipher huawei@123.con privilege level 3
[Huawei-aaa]local-user user1 service-type ssh
[Huawei-aaa]q
[Huawei]rsa l
[Huawei]rsa local-key-pair create
The key name will be: Host
% RSA keys defined for Host already exist.
Confirm to replace them? (y/n)[n]:y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:y
% Invalid number, the range is (512 ~ 2048).
[Huawei]rsa local-key-pair create
The key name will be: Host
% RSA keys defined for Host already exist.
Confirm to replace them? (y/n)[n]:y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:1024
Generating keys…
…++++++
…++++++
…++++++++
…++++++++
[Huawei]user vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa
[Huawei-ui-vty0-4]protocol inbound ssh
[Huawei-ui-vty0-4]q
[Huawei]ssh user user1 authentication-type pass
[Huawei]ssh user user1 authentication-type password
[Huawei]stelnet server enable
Info: Succeeded in starting the STELNET server.
[Huawei]

pc

sys
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip address 1.1.1.1 24
[Huawei]ssh client first-time enable
[Huawei]stelnet 1.1.1.2
Please input the username:user1
Trying 1.1.1.2 …
Press CTRL+K to abort
Connected to 1.1.1.2 …
The server is not authenticated. Continue to access it? (y/n)[n]:y
Save the server’s public key? (y/n)[n]:y
The server’s public key will be saved with the name 1.1.1.2. Please wait…
Enter password:
Enter password:
Enter password:
Info: The connection was closed by the remote host.
登录成功