Huawei V300R005 Configuration Manual page 213

9 Telnet and SSH
# Configure the authentication scheme Test and authentication mode RADIUS.
[Quidway] aaa
[Quidway-aaa] authentication-scheme test
[Quidway-aaa-authen-test] authentication-mode radius
[Quidway-aaa-authen-test] quit
# Configure the RADIUS template of SSH server as ssh.
[Quidway] radius-server template ssh
# Configure the IP address and port of the RADIUS authentication server.
[Quidway-radius-ssh] radius-server authentication 10.164.16.49 1812
# Configure the key of RADIUS server as huawei.
[Quidway-radius-ssh] radius-server shared-key huawei
[Quidway-radius-ssh] quit
Step 5 Configure RADIUS domain name.
# Configure the RADIUS domain of SSH server as ssh.com, applying authentication scheme
Test and RADIUS template ssh.
[Quidway] aaa
[Quidway-aaa] domain ssh.com
[Quidway-aaa-domain-ssh.com] authentication-scheme test
[Quidway-aaa-domain-ssh.com] radius-server ssh
[Quidway-aaa-domain-ssh.com] quit
[Quidway-aaa] quit
Step 6 Connect the SSH client and the SSH server.
# Enable STelnet and SFTP services on the SSH server.
<Quidway> system-view
[Quidway] stelnet server enable
[Quidway] sftp server enable
# For the first login, you need to enable the first authentication on SSH client.
[client]
[client] quit
# Connect the STelnet client to the SSH server in the RADIUS authentication.
<client> system-view
[client] stelnet 10.164.39.222
Please input the username: ssh@ssh.com
Trying 10.164.39.222 ...
Press CTRL+K to abort
Connected to 10.164.39.222 ...
The server is not authenticated. Do you continue to access it?(Y/N):y
Do you want to save the server's public key?(Y/N):y
The server's public key will be saved with the name: 10.164.39.222. Please wait...
Enter password:
Enter the password Huawei and view as follows:
***********************************************************
*
9-52
ssh client first-time enable
All rights reserved (2000-2007)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway NetEngine80
Configuration Guide - Basic Configurations
*
Issue 04 (2009-12-20)