As an SSH server, a switch can connect to multiple SSH clients; as an SSH client, a switch can establish SSH connections with switches or UNIX hosts that support SSH server. Currently, the S7500 series switches support SSH2.0 (compatible with SSH1.5). The communication process between the server and client includes the following five stages: Version negotiation stage.
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Through the above steps, the server and the client get the same session key, which is to be used to encrypt and decrypt data exchanged between the server and the client later.
Page 4
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Table 1-1 Configure SSH2.0 server To do… Use the command… Remarks Configure supported Configuring protocol inbound protocols supported protocols Generate a local RSA key pair...
Page 5
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Caution: When SSH protocol is supported in the current user interface, to ensure a successful login, you must use the authentication-mode scheme command to configure the AAA authentication for login to the user interface.
Page 6
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Note: Configuration of the rsa local-key-pair create can survive a reboot. You only need to configure it once. III. Creating an SSH user Table 1-4 Create an SSH user To do...
Page 7
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration When the two commands are configured simultaneously, and the authentication types configured for the user (specified by username) are different from each other, comply with the configuration of the ssh user username authentication-type command.
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration VI. Configuring client public keys You can configure RSA public keys for client users on the switch and specify RSA private keys, which correspond to the public keys, on the client. The client public keys are generated randomly by the SSH2.0 client software.
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration To do... Use the command... Remarks — Enter system view system-view Required ssh2 { host-ip | host-name } You can use this [ port-num ] [ prefer_kex...
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Table 1-8 Display SSH configuration To do... Use the command... Remarks Display the public keys of the host key pair and the server...
Page 11
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Set authentication type. Settings for the two authentication types are described respectively in the following section: Password authentication # Set AAA authentication on the user interfaces.
[H3C-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125 [H3C-rsa-key-code] public-key-code end [H3C-rsa-public-key] peer-public-key end [H3C] ssh user client002 assign rsa-key H3C002 # Start the SSH client software on the host which stores the RSA private keys and perform corresponding configurations to establish an SSH connection. 1.1.6 SSH Client Configuration Example I.
Page 13
Trying 10.165.87.136 ... Press CTRL+K to abort Connected to 10.165.87.136 ... Enter password: ************************************************************************** * Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <H3C>...
Trying 10.165.87.136... Press CTRL+K to abort Connected to 10.165.87.136... ************************************************************************** * Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <H3C>...
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Note: For SFTP login users, it is necessary to set their service type to sftp or all. II. Enabling the SFTP server Table 1-10 Enable the SFTP server To do...
Page 16
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Command To do... View Remarks Key word Rename a file on the rename SFTP server Download a file from the remote SFTP server...
Page 17
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration To do... Use the command... Remarks The three commands Disable the SFTP client exit have the same function. quit III. Operating with SFTP directories SFTP directory-related operations include: changing or displaying the current directory, creating or deleting a directory, and displaying files or information of a specific directory.
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Table 1-15 Operate with SFTP files To do... Use the command... Remarks Enter system view system-view sftp { host-ip | Enter SFTP client view...
Page 19
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration II. Network diagram Switch B Switch A SFTP Server SFTP Client IP address: 10.111.27.91/24 Figure 1-3 Network diagram for SFTP configuration III. Configuration procedure Configure Switch B (SFTP server) # Enable the SFTP server.
Page 20
Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration New directory created sftp-client> dir -rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 config.cfg -rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2...
Need help?
Do you have a question about the S7500 Series and is the answer not in the manual?
Questions and answers