华为交换机S5735S配置SSH

1、在服务器端生成本地密钥对

<HUAWEI>system-view

[HUAWEI] dsa local-key-pair create 

Info: The key name will be: HUAWEI_Host_DSA.

Info: The key modulus can be any one of the following : 1024, 2048.

Info: If the key modulus is greater than 512, it may take a few minutes.     

Please input the modulus [default=2048]: 此处需要手动输入，比如输入2048

Info: Generating keys...

Info: Succeeded in creating the DSA host keys

 

2、在服务器端创建SSH用户

a.配置VTY用户界面。

[HUAWEI] user-interface vty 0 14

[HUAWEI-ui-vty0-14] authentication-mode aaa

[HUAWEI-ui-vty0-14] protocol inbound ssh

[HUAWEI-ui-vty0-14] quit

 

b.新建用户名为client001的SSH用户，且认证方式为Password。

[HUAWEI] aaa

[HUAWEI-aaa] local-user client001 password irreversible-cipher Huawei@123

[HUAWEI-aaa] local-user client001 privilege level 3

[HUAWEI-aaa] local-user client001 service-type ssh

[HUAWEI-aaa] quit

[HUAWEI] ssh user client001 authentication-type password

 

3、SSH服务器端开启STelnet服务功能

[HUAWEI] stelnet server enable

 

 

4、配置SSH用户client001的服务方式为STelnet

[HUAWEI] ssh user client001 service-type stelnet

 

5、需要配置ssh源接口才行。

[HUAWEI]ssh server-source all-interface