SSH是在传统的Telnet协议之基础上发展起来的一种安全的远程登录协议。相比于Telnet,SSH无论是在认证方式或者数据传输的安全性上,都有很大的提高。

步骤一、生成本地密钥对

[Huawei]rsa local-key-pair create
The key name will be: Huawei_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
       it will take a few minutes.
Input the bits in the modulus[default = 512]:1024
Generating keys...
............................++++++
...++++++
..++++++++
......++++++++
步骤二、配置VTY用户界面
[Huawei]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa
[Huawei-ui-vty0-4]protocol inbound ssh
[Huawei-ui-vty0-4]quit
步骤三、创建SSH用户,并配置用户的认证方式为password
[Huawei]ssh user  shxke authentication-type password
步骤四、配置SSH用户的用户名和密码
[Huawei]aaa
[Huawei-aaa]local-user shxke password cipher shxke
Info: Add a new user.
[Huawei-aaa]local-user shxke privilege level 3
[Huawei-aaa]local-user shxke service-type ssh
[Huawei-aaa]quit
步骤五、使能STelent功能,并配置用户的服务类型为STelnet
[Huawei]stelnet server enable
Info: Succeeded in starting the Stelnet server.
[Huawei]ssh user shxke service-type stelnet
配置完成,就这么简单,你学会了吗??