Huawei AR2200 Series Configuration Manual page 180

Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
Figure 8-14 Networking diagram of authenticating the SSH through RADIUS
SSH Client
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
7.
8.
9.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
Procedure
Step 1 Generate a local key pair on the SSH server.
<Huawei> system-view
[Huawei] rsa local-key-pair create
The key name will be: Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Issue 02 (2011-10-15)
GE1/0/0
10.164.39.222/24
GE1/0/0
10.164.39.221/24
SSH Server
Configure the RADIUS template on the SSH server.
Configure a domain on the SSH server.
Create a user on the RADIUS server.
Generate the local key pair on STelnet client and SSH server respectively.
Generate the local key pair on the client and SSH server .
Generate the RSA public key on SSH server and bind the RSA public key of the SSH client
to ssh2@ssh.com.
Enable the STelnet and SFTP services on the SSH server.
Configure the service mode and authorization directory of the SSH user.
Users ssh1@ssh.com and ssh2@ssh.com log in to the SSH server through STelnet and
SFTP respectively.
Configure the password authentication for the two SSH users .
RADIUS authentication
Name of the RADIUS template
Name of the RADIUS domain
Name and password of the RADIUS user
It will take a few minutes.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 Accessing Another Device
10.164.6.49/24
Radius Server
169