Huawei AR2200 Series Configuration Manual page 92

Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
Figure 5-7 Networking diagram of configuring user login by using STelnet
P C
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Generate a local key pair on the server.
<Huawei> system-view
[Huawei] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: Huawei_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Step 2 Configure the VTY user interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
Step 3 Configure the password of the SSH user Client001 to huawei.
[SSH Server] aaa
Issue 02 (2011-10-15)
N e tw o rk
Configure a local key pair on the SSH server for secure data exchange between the STelnet
client and the SSH server.
Configure the VTY user interface on the SSH server.
Configure an SSH client, which involves the setting of the user authentication mode, user
name, and password.
Enable the STelnet server function on the SSH server and configure a user service type.
SSH user authentication mode: password, user name: client001, password: huawei
User level of client001: 3
IP address of the SSH server: 10.137.217.223
It will take a few minutes.
NOTE
If SSH is configured as the login protocol, the AR2200 automatically disables Telnet.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
G E 1 /0 /0
1 0 .1 3 7 .2 1 7 .2 2 3 /1 6
S S H S e rv e r
5 Configuring User Login
81