H3C S7500E Series Operation Manual page 1288

Operation Manual – SSH
H3C S7500E Series Ethernet Switches
III. Configuration procedure
Configure the SSH server
# Create an RSA key pair and enable the SSH server.
<SwitchB> system-view
[SwitchB] public-key local create rsa
[SwitchB] ssh server enable
# Create an IP address for VLAN-interface 1, which the SSH client will use as the
destination for SSH connection.
[SwitchB] interface vlan-interface 1
[SwitchB-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[SwitchB-Vlan-interface1] quit
# Set the authentication mode for the user interface to AAA.
[SwitchB] user-interface vty 0 4
[SwitchB-ui-vty0-4] authentication-mode scheme
# Enable the user interface to support SSH.
[SwitchB-ui-vty0-4] protocol inbound ssh
[SwitchB-ui-vty0-4] quit
# Create local user client001.
[SwitchB] local-user client001
[SwitchB-luser-client001] password simple aabbcc
[SwitchB-luser-client001] service-type ssh level 3
[SwitchB-luser-client001] quit
# Specify the service type for user client001 as Stelnet, and the authentication method
as password.
[SwitchB]
password
Configure the SSH client
# Configure an IP address for VLAN-interface 1.
<SwitchA> system-view
[SwitchA] interface vlan-interface 1
[SwitchA-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[SwitchA-Vlan-interface1] quit
# Disable first-time authentication.
[SwitchA] undo ssh client first-time
# Configure the host public key of the SSH server.
[SwitchA] public-key peer key1
[SwitchA-pkey-public-key] public-key-code begin
ssh user client001 service-type stelnet
1-24
Chapter 1 SSH Configuration
authentication-type