配置华为设备ssh登录实现网络设备与VMWare虚拟机信息交互

前言

本博文主要讲解了如何配置华为eNSP模拟器设备路由器的ssh登录，以便自动化应用可以更好的控制管理相关网络设备。
相关网络拓扑如下：

前提条件

配置ssh之前需要确保linux服务器与eNSP之间的连通性。

可参考我的另外一篇博文《实现eNSP与VMWare虚拟机通信访问》。

配置步骤

1. 进入系统编辑视图

<HUAWEI>system-view 
Enter system view, return user view with return command.

2. 创建本地RSA密钥对

[~HUAWEI]rsa local-key-pair creat
The key name will be:HUAWEI_Host
The range of public key size is (2048 ~ 2048).
NOTE: Key pair generation will take a short while.
[*HUAWEI]
[*HUAWEI]

3. 配置vty界面支持的登录协议

[*HUAWEI] user-interface vty 0 4
[*HUAWEI-ui-vty0-4]aut	
[*HUAWEI-ui-vty0-4]authentication-mode aaa
Warning: The level of the user-interface(s) will be the default level of AAA use
rs, please check whether it is correct. After the authentication mode is set to 
AAA, you need to enter the user name and password to log in.
[*HUAWEI-ui-vty0-4]pro	
[*HUAWEI-ui-vty0-4]protocol inbo	
[*HUAWEI-ui-vty0-4]protocol inbound all
[*HUAWEI-ui-vty0-4]commit

4. 创建SSH用户xxx

[~HUAWEI-ui-vty0-4]ssh user josen01
Info: Succeeded in adding a new SSH user.
[*HUAWEI]ssh user	
[*HUAWEI]ssh user josen01 auth	
[*HUAWEI]ssh user josen01 authentication-type pas	
[*HUAWEI]ssh user josen01 authentication-type password

5. 在AAA视图下创建同名的local-user用户

[*HUAWEI]aaa 
[*HUAWEI-aaa]loc	
[*HUAWEI-aaa]local-user josen01 pas	
[*HUAWEI-aaa]local-user josen01 password cip	
[*HUAWEI-aaa]local-user josen01 password cipher ********
Info: A new user is added.
[*HUAWEI-aaa]loc	
[*HUAWEI-aaa]local-user josen01 ser	
[*HUAWEI-aaa]local-user josen01 service-type ssh
Info: The user josen01's password has been changed to be irreversible.
[*HUAWEI-aaa]local-user josen01 level 3	
[*HUAWEI-aaa]q

6. 配置SSH用户的服务方式

[*HUAWEI]ssh user	
[*HUAWEI]ssh user josen01 ser	
[*HUAWEI]ssh user josen01 service-type all

若该步骤不做，可能会导致ssh连接时报shell request failed on channel 0错误

7. 使能ssh服务

[*HUAWEI]stel	
[*HUAWEI]stelnet serv	
[*HUAWEI]stelnet server enab	
[*HUAWEI]stelnet server enable 
Info: Succeeded in starting the STelnet server.

8. 提交保存

[*HUAWEI]commit
[~HUAWEI]

验证结果

通过服务器ssh登录到设备