Huawei netengine80e Configuration Manual page 117

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
1.
2.
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Generate a local key pair on the server.
<HUAWEI> system-view
[HUAWEI] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: HUAWEI_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Step 2 Configure the VTY user interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
Step 3 Configure the password of the SSH user Client001 to huawei.
[SSH Server] aaa
[SSH Server-aaa] local-user client001 password cipher huawei
[SSH Server-aaa] local-user client001 level 3
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] quit
Step 4 Enable the STelnet service on the SSH server.
[SSH Server] stelnet server enable
[SSH Server] ssh authentication-type default password
[SSH Server] quit
Step 5 Verify the configuration.
# Log in to the device through the software putty, and specify the IP address of the device being
10.164.39.210 and the login protocol being SSH.
Issue 02 (2011-09-10)
Configure a local key pair on the SSH server for secure data exchange between the STelnet
client and the SSH server.
Configure the VTY user interface on the SSH server.
Configure an SSH client, which involves the setting of the user authentication mode, user
name, and password.
Enable the STelnet server function on the SSH server and configure a user service type.
SSH user authentication mode: password, user name: client001, password: huawei
User level of client001: 3
IP address of the SSH server: 10.164.39.210
It will take a few minutes.
NOTE
If SSH is configured as the login protocol, the NE80E/40E automatically disables Telnet.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 Configuring User Login
102