H3C S7500 Series Operation Manual page 11

Operation Manual – SSH Terminal Service
H3C S7500 Series Ethernet Switches
2) Set authentication type.
Settings for the two authentication types are described respectively in the following
section:
Password authentication
# Set AAA authentication on the user interfaces.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Set the user interfaces to support SSH.
[H3C-ui-vty0-4] protocol inbound ssh
# Configure the login protocol for the client001 user as SSH, specify commands of level
3, authentication type as password and the authentication password as abc.
[H3C] local-user client001
[H3C-luser-client001] password simple abc
[H3C-luser-client001] service-type ssh level 3
[H3C-luser-client001] quit
[H3C] ssh user client001 authentication-type password
Note:
Select the default SSH authentication timeout time and authentication retry times. After
these settings, run the SSH2.0-supporting client software on other terminals connected
to the switch. These terminals can log in to the switch using user name client001 and
password abc.
RSA public key authentication
# Set AAA authentication on the user interfaces.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Set the user interfaces to support SSH.
[H3C-ui-vty0-4] protocol inbound ssh
# Set the command level for the login users to 3.
[H3C-ui-vty0-4] user privilege level 3
[H3C-ui-vty0-4] quit
# Configure the login protocol for the client002 user as SSH and authentication type as
RSA public key.
[H3C] ssh user client002 authentication-type rsa
Chapter 1 SSH Terminal Service Configuration
1-10