Huawei netengine80e Configuration Manual page 205

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
Two users client001 and client002 are configured to log in to the SSH server in the authentication
mode of password and RSA respectively.
Figure 8-10 Networking diagram for logging in to another device by Using STelnet
10.10.2.2/16
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Generate a local key pair on the server.
<HUAWEI> system-view
[HUAWEI] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: SSH Server_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.......++++++++++++
..........++++++++++++
Issue 02 (2011-09-10)
SSH Server
GE1/0/1
10.10.1.1/16
GE1/0/1
Client 001
Configure Client001 and Client002 to log in to the SSH server in different authentication
modes.
Create a local RSA key pair on the STelnet client Client002 and the SSH server, and bind
the client client002 to an RSA key to authenticate the client when the client attempts to log
in to the server.
Enable STelnet service on the SSH server.
Set the service type of Client001 and Client002 to STelnet.
Enable first-time authentication on the SSH client.
Users Client001 and Client002 log in to the SSH server through STelnet.
Client001 with the password as huawei and adopt the password authentication.
Client002, adopt the RSA authentication and assign the public key RsaKey001 to
Client002.
IP address of the SSH server is 10.10.1.1.
It will take a few minutes.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
GE1/0/1
10.10.3.3/16
Client 002
8 Accessing Another Device
190