华为SSH配置

交换

1. 创建管理vlan60

[Huawei]vlan 600

[Huawei]interface Vlanif 600

创建vlan600接口

2. 配置交换的管理vlan的所在ip

[Huawei-Vlanif600]ip address 10.0.0.10 255.255.255.0

配置vlan接口的ip地址为10.0.0.10/24

3. 密钥配置

[Huawei]rsa local-key-pair create

生成rsa密钥

• 返回

  The key name will be: Huawei_Host
  The range of public key size is (512 ~ 2048).
  NOTES: If the key modulus is greater than 512,it will take a few minutes.
  Input the bits in the modulus[default = 512]:
  Generating keys…

4. 管理可用vty

[Huawei]user-interface vty 0 4

设置0-4号虚拟线路

[Huawei-ui-vty0-4]authentication-mode aaa

认证模式改为aaa(3a)

[Huawei-ui-vty0-4]protocol inbound ssh

协议绑定为ssh(可选: all/telnet/ssh 三种)

5. 用户配置

[Huawei]ssh user huawei

创建ssh用户huawei

[Huawei]ssh user huawei authentication-type password

配置ssh用户huawei认证方式为password

[Huawei]aaa

3a配置

[Huawei-aaa]local-user huawei password cipher huawei

设置本地用户huawei的密码为huawei

[Huawei-aaa]local-user huawei privilege level 15

设置本地用户huawei的权限级别为15（最高权限）

[Huawei-aaa]local-user huawei service-type ssh

设置本地用户huawei的服务类型为ssh

[Huawei]ssh user huawei service-type stelnet

设置ssh用户huawei的服务类型为stelnet

路由