实验拓扑:
路由器和电脑的虚拟网卡桥接
桥接的方法如下所示:
配置路由器的SSH服务
#配置路由器IP基础
[Huawei]sys R1
[R1]inter g0/0/0
[R1-GigabitEthernet0/0/0]ip add 192.168.233.200 24
[R1-GigabitEthernet0/0/0]q
可选命令是重新生成RSA密钥对,因为默认已经存在有了
[Huawei]rsa local-key-pair create
The key name will be: Host
% RSA keys defined for Host already exist.
Confirm to replace them? (y/n)[n]:y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:1024
Generating keys...
.++++++
......................++++++
.++++++++
.....++++++++
#开启SSH服务并创建账号
[R1]stelnet server enable
[R1]aaa
[R1-aaa]local-user ssh001 privilege level 3 password cipher ssh001
[R1-aaa]local-user ssh001 service-type ssh
[R1-aaa]q
#配置VTY上允许SSH协议
[R1]user-interface vty 0 4
[R1-ui-vty0-4]authentication-mode aaa
[R1-ui-vty0-4]protocol inbound ssh
在电脑上使用PUTTY登陆
这里写入服务器指纹到PC,选“是”
输入账号密码,红线地方是密码
协议抓包分析
登陆时候使用ENSP自带的抓包软件进行抓包
解码TCP流后看到的密文