Configuring The Ssh Server - H3C SR6600 Fundamentals Configuration Manual

Object
SSH server
SSH client
By default, the device is enabled with the SSH server and client functions.
On a device that serves as the SSH client, you can log in to an SSH server to perform operations
on the server.
On a device that serves as the SSH server, you can configure the authentication mode and user
level for SSH users. By default, password authentication is adopted for SSH login, but no login
password is configured. Therefore, you cannot log in to the device through SSH by default. Before
you can log in to the device through SSH, you need to log in to the device through the console port
and configure the authentication mode, user level, and common settings.
This section includes these topics:

Configuring the SSH Server

Configuring the SSH Client
Configuring the SSH Server
Configuration prerequisites
You have logged in to the device, and want to log in to the device through SSH in the future.
By default, you can log in to the device through the console port without authentication and have user
privilege level 3 after login. For how to log in to the device with default configuration, see
Requirements.
Configuration procedure
Follow these steps to configure the device that serves as an SSH server:
To do...
Enters system view
Create local key pair(s)
Enable SSH server
Exit to system view
Enter one or more VTY user
interface views
Specify the scheme authentication
mode
Enable the current user interface to
support either Telnet, SSH, or both
of them
Configure the IP address of the interface, and make sure the SSH server and
client can reach each other.
Configure the authentication mode and other settings.
Run the SSH client program.
Obtain the IP address of the interface on the server.
Use the command...
system-view
public-key local create { dsa |
rsa }
ssh server enable
quit
user-interface vty first-number
[ last-number ]
authentication-mode scheme
protocol inbound { all | ssh }
3-48
Requirements
Remarks
—
Required
By default, no local key pair(s) are
created.
Required
By default, SSH server is disabled.
—
—
Required
By default, authentication mode for
VTY user interfaces is password.
Optional
By default, both protocols are
supported.
Configuration