Zte ZXR10 ZSR V2 Configuration Manual (System Management page 15

l The SSH protocol prevents information leakage in remote management processes.
l
The SSH protocol encrypts all transferred data, and prevents
spoofing.
l
The SSH protocol transfers compressed data, accelerating transmission.
l
The SSH protocol is usually used to replace Telnet, and provides a secure "channel"
for FTP, POP, or even PPP.
Steps
1. Configure SSH.
Step
1
2
3
4
5
2. Maintain SSH.
Command
ZXR10(config)#
3. Configure an SSH client.
The following uses Putty as an example to describe how to configure an SSH client.
a. Enable Putty.exe on the SSH host. Type the IP address of the remote router
(such as 192.168.5.3) in the Host Name text box, see
SJ-20140504150128-007|2014-05-10 (R1.0)
Command
ssh server enable [listen
ZXR10(config)#
{<22>|<49152-65535>}]
ssh server access-class {ipv4 |
ZXR10(config)#
ipv6}<acl-name>
ssh server dscp <dscp-value>
ZXR10(config)#
ssh <dest-address> encrypt {none | aes128 |
ZXR10#
blowfish | 3des} compress {none | zlib} mac {none |
sha1 | md5}[{[<source-address>],[<port-number>],[vrf
<vrf-name>],[dscp <dscp-value>]}]
ssh6 <dest-address> encrypt {none | aes128 |
ZXR10#
blowfish | 3des} compress {none | zlib} mac {none | sha1
| md5}[{[<port-number>],[vrf <vrf-name>],[interface
<interface-name>],[dscp <dscp-value>]}]
ssh server disable
Chapter 1 Device Connection management
1-7
ZTE Proprietary and Confidential
DNS spoofing and IP
Function
Enables the SSH server
function, which is disabled
by default. Allow the
specification of a port
number.
Binds an ACL for SSH.
Specifies the DSCP value
of control plane packets for
the IPv4/IPv6 SSH server.
Default: 48.
Enables this router to log in
as a client to an IPv4 SSH
server in SSH mode.
Enables this router to log in
as a client to an IPv6 SSH
server in SSH mode.
Function
Disables the SSH server
function.
Figure 1-4.