Huawei Quidway S2700 Series Configuration Manual page 189

Quidway S2700 Series Ethernet Switches
Configuration Guide - Basic Configuration
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
4.
5.
6.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
Procedure
Step 1 Create a local RSA key pair on the SSH server.
<Quidway> system-view
[Quidway] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: SSH Server_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 512
Generating keys...
.....++++++++++++
....++++++++++++
......++++++++
................................++++++++
Step 2 Create an SSH user on the SCP server.
# Configure the VTY user interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
# Configure the password authentication for the SSH user Client001.
[SSH Server] ssh user client001
[SSH Server] ssh user client001 authentication-type password
# Configure the password of the SSH user Client001 to huawei.
[SSH Server] aaa
[SSH Server-aaa] local-user client001 password cipher huawei
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] quit
# Configure the service type for the SSH users Client001 to all.
Issue 01 (2011-07-15)
Create a local RSA key pair on the SSH server.
Create an SSH user on the SSH server.
Enable SCP services on the SSH server.
Enable first-time authentication on the SSH client.
Configure an IP address of the source interface on the SCP client.
Download files from the SSH server to the SCP client.
SSH user name, authentication mode, and authentication password
IP address of the source interface on the SCP client
The name and path of the destination files and the source files.
It will take a few minutes.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Telnet and SSH
178