SSH Configuration on H3C Router

Posted: 1 September 2010 in Neworking

Network Diagram

# Generate RSA and DSA key pairs and enable SSH server
<Router> system-view
[Router] public-key local create rsa
[Router] public-key local create dsa
[Router] ssh server enable

# Configure an IP address for interface Ethernet 1/1, which the SSH client will use as the destination for SSH connection.
[Router] interface ethernet 1/1
[Router-Ethernet1/1] ip address 192.168.1.40 255.255.255.0
[Router-Ethernet1/1] quit

# Set the authentication mode for the user interface to AAA.
[Router] user-interface vty 0 4
[Router-ui-vty0-4] authentication-mode scheme

# Enable the user interfaces to support SSH.
[Router-ui-vty0-4] protocol inbound ssh
[Router-ui-vty0-4] quit

#Create a local user named client001, and set the user command privilege level to 3.
[Router] local-user client001
[Router-luser-client001] password simple aabbcc
[Router-luser-client001] service-type ssh level 3
[Router-luser-client001] quit

#Specify the service type of user client001 as Stelnet, and the authentication method as password.
[Router] ssh user client001 service-type stelnet authentication-type password

Komentar