Huawei Quidway NetEngine 20 series Configuration Manual page 194

Quidway NetEngine20/20E
Configuration Guide - Basic Configurations
<Quidway> system-view
[Quidway] stelnet server enable
[Quidway] sftp server enable
# When you log in for the first time, enable the first-time authentication for the SSH client.
[client]
[client] quit
# Connect the STelnet client to the SSH server through RADIUS authentication mode.
<client> system-view
[client] stelnet 10.164.39.222
Please input the username: ssh1@ssh.com
Trying 10.164.39.222 ...
Press CTRL+K to abort
Connected to 10.164.39.222 ...
Step 6 Verify the configuration.
After the configuration, run the display radius-server configuration command and the
display ssh server session command on the SSH server. You can view the configuration of
the RADIUS server on the SSH server. You can also view that the STelnet or SFTP client is
connected to the SSH server successfully in the RADIUS authentication.
# Display the configuration of the RADIUS server.
[Quidway -aaa] display radius-server configuration
-------------------------------------------------------------------
Server-template-name
Protocol-version
Traffic-unit
Shared-secret-key
Timeout-interval(in second)
Primary-authentication-server
Primary-accounting-server
Secondary-authentication-server : 0.0.0.0:0:LoopBack0
Secondary-accounting-server
Retransmission
Domain-included
-------------------------------------------------------------------
# Display the connection of the SSH server.
[Quidway] display ssh server session
Conn
VTY 0 2.0
----End
Configuration Files
#
sysname Quidway
#
radius-server template ssh
radius-server authentication 10.164.16.49 1812
#
aaa
Issue 05 (2010-01-30)
ssh client first-time enable
Ver Encry State
AES started
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
: ssh
: standard
: B
: huawei
: 5
: 10.164.16.49:1812:LoopBack-1
: 0.0.0.0:0:LoopBack0
: 0.0.0.0:0:LoopBack0
: 3
: YES
retry Username
0 client001
9 Telnet and SSH
9-45