Using The Device As An Ssh Client To Log In To The Ssh Server - H3C S5500-HI Series Fundamentals Configuration Manual

Step
10. Apply an AAA authentication
scheme to the intended
domain.
11. Create a local user and enter
local user view.
12. Set a password for the local
user.
13. Specify the command level of
the user.
14. Specify SSH service for the
user.
15. Exit to system view.
16. Create an SSH user, and
specify the authentication
mode for the SSH user.
17. Configure common settings
for VTY user interfaces.

Using the device as an SSH client to log in to the SSH server

You can use the device as an SSH client to log in to an SSH server. If the server is located in a different
subnet than the device, make sure the two devices have routes to reach each other.
Figure 15 Logging in to an SSH server from the device
To use the device as an SSH client to log in to an SSH server, perform the following tasks in user view:
Command
a. Enter the ISP domain view:
domain domain-name
b. Apply the specified AAA
scheme to the domain:
authentication default
{ hwtacacs-scheme
hwtacacs-scheme-name
[ local ] | local | none |
radius-scheme
radius-scheme-name
[ local ] }
c. Exit to system view:
quit
local-user user-name
•
In non-FIPS mode:
password [ [ hash ] { cipher |
simple } password ]
•
In FIPS mode:
password
authorization-attribute level level
service-type ssh
quit
ssh user username service-type
stelnet authentication-type
{ password | { any |
password-publickey | publickey }
assign publickey keyname }
See "Configuring common settings
for VTY user interfaces (optional)."
41
Remarks
Optional.
For local authentication, configure
local user accounts.
For RADIUS or HWTACACS
authentication, configure the
RADIUS or HWTACACS scheme
on the device and configure
authentication settings (including
the username and password) on
the server.
For more information about AAA
configuration, see Security
Configuration Guide.
By default, no local user exists.
By default, no password is set.
In FIPS mode, you can set the
password only in interactive mode.
Optional.
By default, the command level is 0.
By default, no service type is
specified.
N/A
N/A
Optional.