拓扑
实验设备型号
AR2220两台
配置思路
SW1主要配置
[SW1-aaa]local-user ssh-test password cipher ssh@123
[SW1-aaa]local-user ssh-test privilege level 3
[SW1-aaa]local-user ssh-test service-type ssh terminal
[SW1]stelnet server enable
[SW1]ssh user ssh-test authentication-type password
[SW1]ssh user ssh-test service-type stelnet
[SW1]ssh client first-time enable
[SW1]user-interface vty 0 4
[SW1-ui-vty0-4]authentication-mode aaa
[SW1-ui-vty0-4]user privilege level 3
[SW1-ui-vty0-4]protocol inbound ssh
SW2主要配置
#
[SW2]ssh client first-time enable
[SW2]stelnet 192.168.1.1
[SW2]stelnet 192.168.1.1
Please input the username:ssh-test
Trying 192.168.1.1 ...
Press CTRL+K to abort
Connected to 192.168.1.1 ...
Enter password:ssh@123
#
SW1配置脚本
<SW1>display current-configuration
#
sysname SW1
#
aaa
local-user admin password cipher %$%$K8m.Nt84DZ}e#<0`8bmE3Uw}%$%$
local-user admin service-type http
local-user ssh-test password cipher %$%$*u.X'+(IMCnBCY'o5/<C>*T0%$%$
local-user ssh-test privilege level 3
local-user ssh-test service-type terminal ssh
#
interface GigabitEthernet0/0/0
description to_SW2_G0/0/0
ip address 192.168.1.1 255.255.255.252
#
ssh client first-time enable
stelnet server enable
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
authentication-mode aaa
user privilege level 3
protocol inbound ssh
user-interface vty 16 20
#
return
SW2配置脚本
<SW2>display current-configuration
#
sysname SW2
#
interface GigabitEthernet0/0/0
description to_SW1_G0/0/0
ip address 192.168.1.2 255.255.255.252
#
ssh client first-time enable
#
return
配置说明1
#
aaa #进入aaa视图
local-user ssh-test password simple ssh123 #创建用户ssh-test，密码（明码）ssh123
local-user ssh-test privilege level 15 #调整用户ssh-test权限等级15
local-user ssh-test service-type ssh terminal #调整用户ssh-test支持的服务为ssh和终端
#
stelnet server enable #开启ssh服务
ssh user ssh-test #将用户ssh-test添加到ssh服务
ssh user ssh-test authentication-type password #调整ssh-test认证模式为密码
ssh user ssh-test service-type stelnet #将ssh用户ssh-test的服务调整为stelnet协议
ssh client first-time enable #开启ssh客户端首次认证
#
user-interface vty 0 4 #进入虚拟通道0至4
authentication-mode aaa #认证模式为aaa
user privilege level 15 #用户权限等级15
protocol inbound ssh #入方向协议为ssh
#
return
配置配置说明2
ssh client first-time enable #开启ssh客户端首次认证
stelnet 192.168.1.1 #远程登录目标设备
Please input the username:ssh-test #输入用户名
Enter password: #输入密码
