Using The Device To Log In To An Ssh Server - HP 830 Series Configuration Manual

Step
8. Enable command accounting.
9. Exit to system view.
10. Apply an AAA authentication
scheme to the intended
domain.
11. Create a local user and enter
local user view.
12. Set a password for the local
user.
13. Specify the command level of
the user.
14. Specify SSH service for the
user.
15. Exit to system view.
16. Create an SSH user, and
specify the authentication
mode for the SSH user.
17. Configure common settings
for VTY user interfaces.

Using the device to log in to an SSH server

You can use the device as an SSH client to log in to an SSH server. If the server is located in a different
subnet than the device, make sure the two devices have routes to reach each other.
Command
command accounting
quit
a. Enter the ISP domain view:
domain domain-name
b. Apply the specified AAA
scheme to the domain:
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | ldap-scheme
ldap-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
c. Exit to system view:
quit
local-user user-name
password { cipher | simple }
password
authorization-attribute level level
service-type ssh
quit
ssh user username service-type
stelnet authentication-type
{ password | { any |
password-publickey | publickey }
assign publickey keyname }
See "Configuring common VTY
user interface settings (optional)."
39
Remarks
Optional.
By default, command accounting is
disabled. The accounting server
does not record the commands
executed by users.
N/A
Optional.
For local authentication, configure
local user accounts.
For RADIUS or HWTACACS
authentication, configure the
RADIUS or HWTACACS scheme
on the device and configure
authentication settings (including
the username and password) on
the server.
For more information about AAA
configuration, see Security
Configuration Guide.
N/A
By default, no password is set.
Optional.
By default, the command level is 0.
By default, no service type is
specified.
N/A
By default, no SSH user is
configured.
Optional.