Huawei netengine80e Configuration Manual page 218

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Generate a local key pair on the server.
<HUAWEI> system-view
[HUAWEI] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: SSH Server_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.........++++++++
......................++++++++
......................+++++++++
.....+++++++++
Step 2 Create an SSH user on the server.
# Configure the VTY user Interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
l Create Client001 for the SSH user.
Issue 02 (2011-09-10)
Configure Client001 and Client002 to log in to the SSH server in different authentication
modes.
Create a local RSA key pair on the STelnet client Client002 and the SSH server, and bind
the client client002 to an RSA key to authenticate the client when the client attempts to log
in to the server.
Enable the SFTP service on the SSH server.
Configure the service mode and authorization directory for the SSH user.
Client001 and Client002 log in to the SSH server by using SFTP to access files on the
server.
Client001 with the password as huawei and adopt the password authentication.
Client002, adopt the RSA authentication and assign the public key RsaKey001 to
Client002.
IP address of the SSH server is 10.10.1.1.
It will take a few minutes.
NOTE
The SSH user can be authenticated in four modes: password, RSA, password-rsa, and all.
l When the SSH adopts the password or password-rsa authentication, configure a local user with the
same name.
l When the SSH user adopts the RSA, password-rsa, or all authentication, the server should save the
RSA public key for the SSH client.
# Create an SSH user with the name Client001. The authentication mode is password.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 Accessing Another Device
203