Ssh Server Configuration Example - H3C S9500 Series Operation Manual

Operation Manual – System Management
H3C S9500 Series Routing Switches

8.1.5 SSH Server Configuration Example

I. Network requirements
As shown in Figure 8-3, a PC (SSH client) running SSH 2.0-enabled client software
establishes a local connection with the switch (SSH server) to better guarantee the
security of exchanged information.
II. Network diagram
PC PC
SSH client
Figure 8-3 Network diagram for SSH server
III. Configuration procedure
1) Generate the RSA key.
[H3C] rsa local-key-pair create
Note:
If the configuration for generating the local key has already been completed, skip this
step.
2) Set the user login authentication mode.
The following shows the configuration methods for both password authentication and
RSA public key authentication.
Password authentication.
# Create the local user client001, and set the authentication mode of the user interface
to AAA.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Specify the login protocol for user client001 as SSH.
[H3C-ui-vty0-4] protocol inbound ssh
[H3C] local-user client001
[H3C-luser-client001] password simple H3C
Chapter 8 SSH Terminal Service
Switch Switch
SSH server
8-12