Example For Accessing The Ssh Server Through Other Port Numbers - Huawei netengine80e Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
l
l
8.8.11 Example for Accessing the SSH Server Through Other Port
Numbers
This section provides an example for accessing the SSH server through other port numbers.In
this example, the monitoring port number of the SSH server is set to a port number other than
the standard monitoring port number so that only valid users can set up connections with the
SSH server.
Networking Requirements
The standard monitored port number of the SSH protocol is 22. The frequent malicious accesses
to the standard port consume bandwidth and affect the performance of the server, and other users
cannot access the standard port.
After the number of the port monitored by the SSH server is set to other port numbers, the attacker
does not know the change of the number of the monitored port and keeps sending socket
connection requests with the standard port 22. After detecting that the port number inthe
connection requests is not the number of the monitored port, the SSH does not set up the socket
connection.
Thus, only the valid user can set up the socket connection through the non-standard monitored
port set by the SSH server, and follow the procedure of negotiating the SSH version number,
Issue 02 (2011-09-10)
#
sftp server enable
ssh user client001
ssh user client002
ssh user client001 authentication-type password
ssh user client002 authentication-type rsa
ssh user client002 assign rsa-key RsaKey001
ssh user client001 service-type sftp
ssh user client002 service-type sftp
ssh user client001 sftp-directory cfcard:.
ssh user client002 sftp-directory cfcard:.
#
user-interface vty 0 4
authentication-mode aaa
protocol inbound ssh
#
Return
Configuration file of Client001 on the SSH client
#
sysname client001
#
interface GigabitEthernet1/0/1
ip address 10.10.2.2 255.255.0.0
#
ssh client first-time enable
#
return
Configuration file of Client002 on the SSH client
#
sysname client002
#
interface GigabitEthernet1/0/1
ip address 10.10.3.3 255.255.0.0
#
ssh client first-time enable
#
return
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 Accessing Another Device
213