Huawei Quidway NetEngine 20 series Configuration Manual page 178

Quidway NetEngine20/20E
Configuration Guide - Basic Configurations
# Configure the VTY user interface.
[Quidway] user-interface vty 0 4
[Quidway-ui-vty0-4] authentication-mode aaa
[Quidway-ui-vty0-4] protocol inbound ssh
[Quidway-ui-vty0-4] quit
# Set the password authentication for the SSH user Client001.
[Quidway] ssh user client001
[Quidway] ssh user client001 authentication-type password
# Set the password of the SSH user Client001 to huawei.
[Quidway] aaa
[Quidway-aaa] local-user client001 password simple huawei
[Quidway-aaa]
local-user client001 service-type ssh
[Quidway-aaa] quit
# Configure the RSA authentication for the SSH user Client002.
[Quidway] ssh user client002
[Quidway] ssh user client002 authentication-type rsa
Step 3 Configure the RSA public key on the server.
# Generate the RSA public key on the client software.
For the detailed configuration procedures, refer to the related operations of the client software. This is
not mentioned here.
# Generate the local key pair on the client.
<Quidway> system-view
[Quidway] sysname client
[client] rsa local-key-pair create
# Generate the RSA public key on the client.
[client] display rsa local-key-pair public
=====================================================
Time of Key pair created: 16:38:51 2007/5/25
Key name: Quidway_Host
Key type: RSA encryption Key
=====================================================
Key code:
3047
0240
BFF35E4B C61BD786 F907B5DE 7D6770C3 E5FD17AB
203C8FCB BBC8FDF2 F7CB674E 519E8419 0F6B97A8
EA91FC4B B9E18836 5E74BFD5 4C687767 A89C6B43
Issue 05 (2010-01-30)
If the password and password-RSA authentication is used, configure a local user of the same user
name.
If the RSA, password-RSA, and all authentication is used, the server must save the RSA public key
of the SSH client.
Create an SSH user Client001.
Create an SSH user Client002.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Telnet and SSH
9-29