H3C S7500 Series Operation Manual
H3C S7500 Series Operation Manual

H3C S7500 Series Operation Manual

Ssh terminal service
Hide thumbs Also See for S7500 Series:

Advertisement

Operation Manual - SSH Terminal Service
H3C S7500 Series Ethernet Switches
Chapter 1 SSH Terminal Service Configuration......................................................................... 1-1
1.1 SSH Terminal Services...................................................................................................... 1-1
1.1.1 Introduction to SSH ................................................................................................. 1-1
1.1.2 Configuring an SSH Server..................................................................................... 1-2
1.1.3 Configuring an SSH Client ...................................................................................... 1-7
1.1.4 Displaying SSH Configuration................................................................................. 1-8
1.1.5 SSH Server Configuration Example........................................................................ 1-9
1.1.6 SSH Client Configuration Example ....................................................................... 1-11
1.2 SFTP Service................................................................................................................... 1-13
1.2.1 SFTP Overview ..................................................................................................... 1-13
1.2.2 SFTP Server Configuration ................................................................................... 1-13
1.2.3 SFTP Client Configuration .................................................................................... 1-14
1.2.4 SFTP Configuration Example................................................................................ 1-17

Table of Contents

i
Table of Contents

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the S7500 Series and is the answer not in the manual?

Questions and answers

Summary of Contents for H3C S7500 Series

  • Page 1: Table Of Contents

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 SSH Terminal Service Configuration................. 1-1 1.1 SSH Terminal Services...................... 1-1 1.1.1 Introduction to SSH ....................1-1 1.1.2 Configuring an SSH Server..................1-2 1.1.3 Configuring an SSH Client ..................
  • Page 2: Chapter 1 Ssh Terminal Service Configuration

    As an SSH server, a switch can connect to multiple SSH clients; as an SSH client, a switch can establish SSH connections with switches or UNIX hosts that support SSH server. Currently, the S7500 series switches support SSH2.0 (compatible with SSH1.5). The communication process between the server and client includes the following five stages: Version negotiation stage.
  • Page 3: Configuring An Ssh Server

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Through the above steps, the server and the client get the same session key, which is to be used to encrypt and decrypt data exchanged between the server and the client later.
  • Page 4 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Table 1-1 Configure SSH2.0 server To do… Use the command… Remarks Configure supported Configuring protocol inbound protocols supported protocols Generate a local RSA key pair...
  • Page 5 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Caution: When SSH protocol is supported in the current user interface, to ensure a successful login, you must use the authentication-mode scheme command to configure the AAA authentication for login to the user interface.
  • Page 6 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Note: Configuration of the rsa local-key-pair create can survive a reboot. You only need to configure it once. III. Creating an SSH user Table 1-4 Create an SSH user To do...
  • Page 7 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration When the two commands are configured simultaneously, and the authentication types configured for the user (specified by username) are different from each other, comply with the configuration of the ssh user username authentication-type command.
  • Page 8: Configuring An Ssh Client

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration VI. Configuring client public keys You can configure RSA public keys for client users on the switch and specify RSA private keys, which correspond to the public keys, on the client. The client public keys are generated randomly by the SSH2.0 client software.
  • Page 9: Displaying Ssh Configuration

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration To do... Use the command... Remarks — Enter system view system-view Required ssh2 { host-ip | host-name } You can use this [ port-num ] [ prefer_kex...
  • Page 10: Ssh Server Configuration Example

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Table 1-8 Display SSH configuration To do... Use the command... Remarks Display the public keys of the host key pair and the server...
  • Page 11 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Set authentication type. Settings for the two authentication types are described respectively in the following section: Password authentication # Set AAA authentication on the user interfaces.
  • Page 12: Ssh Client Configuration Example

    [H3C-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125 [H3C-rsa-key-code] public-key-code end [H3C-rsa-public-key] peer-public-key end [H3C] ssh user client002 assign rsa-key H3C002 # Start the SSH client software on the host which stores the RSA private keys and perform corresponding configurations to establish an SSH connection. 1.1.6 SSH Client Configuration Example I.
  • Page 13 Trying 10.165.87.136 ... Press CTRL+K to abort Connected to 10.165.87.136 ... Enter password: ************************************************************************** * Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <H3C>...
  • Page 14: Sftp Service

    Trying 10.165.87.136... Press CTRL+K to abort Connected to 10.165.87.136... ************************************************************************** * Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <H3C>...
  • Page 15: Sftp Client Configuration

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Note: For SFTP login users, it is necessary to set their service type to sftp or all. II. Enabling the SFTP server Table 1-10 Enable the SFTP server To do...
  • Page 16 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Command To do... View Remarks Key word Rename a file on the rename SFTP server Download a file from the remote SFTP server...
  • Page 17 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration To do... Use the command... Remarks The three commands Disable the SFTP client exit have the same function. quit III. Operating with SFTP directories SFTP directory-related operations include: changing or displaying the current directory, creating or deleting a directory, and displaying files or information of a specific directory.
  • Page 18: Sftp Configuration Example

    Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration Table 1-15 Operate with SFTP files To do... Use the command... Remarks Enter system view system-view sftp { host-ip | Enter SFTP client view...
  • Page 19 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration II. Network diagram Switch B Switch A SFTP Server SFTP Client IP address: 10.111.27.91/24 Figure 1-3 Network diagram for SFTP configuration III. Configuration procedure Configure Switch B (SFTP server) # Enable the SFTP server.
  • Page 20 Operation Manual – SSH Terminal Service H3C S7500 Series Ethernet Switches Chapter 1 SSH Terminal Service Configuration New directory created sftp-client> dir -rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 config.cfg -rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2...

Table of Contents