1.设备作为SSH服务器端设置
#生成RSA密钥对。
system-view
System View: return to User View with Ctrl+Z.
[H3C]public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++++++++++++++++
+++++++++++
+++++++++++++
+++
#生成DSA密钥对。
[H3C]public-key local create dsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++*+++++++++++++
#启动SSH服务器。
[H3C]ssh server enable
#配置VLAN虚接口Vlan-interface 1的IP地址为192.168.1.1,此地址作为SSH服务器的登录地址。
[H3C]interface Vlan-interface 1
[H3C-Vlan-interface1] ip address 192.168.1.1
255.255.255.0
[H3C-Vlan-interface1]quit
#设置SSH客户端登录用户界面的认证方式为password认证。
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4]authentication-mode scheme
#设置Router上远程用户登录协议为SSH。
[H3C-ui-vty0-4]protocol inbound ssh
[H3C-ui-vty0-4]quit
#创建本地用户client001,密码为aabbcc,并设置用户访问的命令级别为最高级别3。
[H3C]local-user client001
[H3C-luser-client001]password simple aabbcc
[H3C-luser-client001]service-type ssh
[H3C-luser-client001] authorization-attribute level 3
[H3C-luser-client001]quit
#配置SSH用户client001的服务类型为Stelnet,认证方式为password认证(此步骤非必配)。
[H3C]ssh user client001 service-type stelnet
authentication-type password
#保存配置
[H3C]save force
2. SSH客户端设置以及配置验证
SSH客户端软件有很多,此处以SecureCRT为例:
打开文件---快速连接,选择协议SSH1,输入设置的用户名和口令: