Huawei AR2200 Series Configuration Manual page 169

Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
1.
2.
3.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Generate a local key pair on the SSH server.
<Huawei> system-view
[Huawei] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Step 2 Create SSH users on the server.
# Configure a VTY user interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
l Create an SSH user named Client001.
l Create an SSH user named Client002.
Step 3 Configure the RSA public key on the server.
Issue 02 (2011-10-15)
Configure Client001 and Client002 on the SSH server.
Generate the local key pairs on the STelnet client and the SSH server respectively.
Generate the RSA public key on SSH server and bind the RSA public key of SSH client to
Client002.
Enable STelnet service on the SSH server.
Users Client001 and Client002 log in to the SSH server through STelnet.
Name and the authentication mode of the SSH user
Password or the RSA public key of the SSH user
Name of the SSH server
It will take a few minutes.
# Create an SSH user named Client001, configure password authentication for the user, and
set the password to huawei.
[SSH Server] aaa
[SSH Server-aaa] local-user client001 password cipher huawei
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] quit
# Create an SSH user named Client002, set the password to huawei, and configure RSA
authentication for the user.
[SSH Server] aaa
[SSH Server-aaa] local-user client002 password cipher huawei
[SSH Server-aaa] local-user client002 service-type ssh
[SSH Server-aaa] quit
[SSH Server] ssh user client002 authentication-type rsa
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 Accessing Another Device
158