Huawei netengine80e Configuration Manual page 151

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
3.
4.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Configure a local key pair on the SSH server.
<HUAWEI> system-view
[HUAWEI] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: HUAWEI_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Step 2 Configure VTY user interfaces on the SSH server.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
Step 3 Configure the SSH user name and password on the SSH server.
[SSH Server] aaa
[SSH Server-aaa] local-user client001 password cipher huawei
[SSH Server-aaa] local-user client001 level 3
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] quit
Step 4 Enable SFTP and configure the user service type to be SFTP.
[SSH Server] sftp server enable
[SSH Server] ssh user client001 authentication-type password
Step 5 Configure the authorization directory for the SSH user.
[SSH Server] ssh user client001 service-type sftp
Step 6 Verify the configurations.
Issue 02 (2011-09-10)
Configure an SSH user, including user authentication mode, user name, password, and
authorization directory.
Enable SFTP services on the SSH server and configure a user service type.
SSH user authentication mode: password, user name: client001, password: huawei
User level of client001: 3
IP address of the SSH server: 10.137.217.225
It will take a few minutes.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Managing File System
136