交換機ssh典型配置案例

1、交換機SSH應用配置：網(wǎng)絡連接：SSH終端與交換機建立本地連接，能ping通交換機即可。交換機及終端配置過程：在交換機上，SSH支持的認證方式有兩種，分別為口令認證和RSA認證。此處采用的SSH客戶 端為免費的putty程序。1、口令認證方式：交換機上的配置：Quidway rsa local-key-pair createQuidway user-interface vty 0 4Quidway-ui-vty0-4 authentication-mode schemeQuidway-ui-vty0-4 protocol inbound sshQuidway local-user ssh1Qu

2、idway-luser-ssh1 password simple huaweiQuidway-luser-ssh1 service-type sshQuidway ssh user ssh1 authentication-type password注：此時添加的ssh用戶ssh1的級別為默認的級別1,如果想要管理交換機還需在交換機上配置super password ；也可以直接配置ssh1的級別為最高的level 3:Quidway-luser-ssh1 service-type ssh level 3客戶端的配置：在Host Name處輸入交換機的ip地址：交換機支持的SSH版本只能為1：在

3、下面的界面里面選擇驗證方式為SSH1 ,不選擇驗證參數(shù):單擊Open按鈕，出現(xiàn)登陸提示框，輸入用戶名及密碼即可:2、RSA認證方式：交換機的配置：Quidway local-user ssh2Quidway-luser-ssh2 service-type sshQuidway user-interface vty 0 4Quidway-ui-vty0-4 authentication-mode shemeQuidway-ui-vty0-4 protocol inbound sshQuidway ssh user ssh2 authentication-type RSAQuidway rsa p

4、eer-public-key rsaQuidway-rsa-public public-key-code beginQuidway-key-code 30818602 8180524E 0D488D01 6B5B8805 24287324 CBB9A613Quidway-key-code CE644155 84CC73E5 C2055B02 457A3A86 DA794B4A A2FBE8ABQuidway-key-code 3AC42F47 F2F58F38 369F8985 9A15B904 03829B62 31F0EDE2Quidway-key-code 8F275DC9 B48B1C

5、64 CCB504F0 9967B7A9 991DF16B 1846C71EQuidway-key-code 2B61E744 CF08F7A3 BC774148 D84F7681 CF5B112D 2F219ED5Quidway-key-code 9474DE71 E8C0A4FD 0C75073D F4210201 25Quidway-key-code public-key-code endQuidway-rsa-public peer-public-key endQuidway ssh user ssh2 assign rsa-key rsa客戶端配置：首先使用一個PuTTY Key G

6、enerator的軟件，生成公鑰和私鑰，再分別將兩個密鑰保存為本地文 件，名為rsa和 private:PuTTT Key GeneratorFile Key Conversions HelpKeyPuHic：key for pacing into authorized_keys：file:1023.37.57796459397532701238920719600335650757673237209301104241823902673196 0364237401235498796331121530006074313228656511376143053776719647039 2SS721979

7、4S344S4710214573057845310612304745514474S477717597781069 11117341704540670101951714912325401229177002319228464288410025394020ActionsGenerate a public/private.key pairLoad an existing private key fileSave the generated:keyParameters1Type of key to generate: SSH1 (RSAfOSH2RSANumber of bita. jn a gener

8、ated kev：OSSH2DSA1024由于生成的密鑰是通用的格式，因此還需要將這些密鑰轉(zhuǎn)換成我司設(shè)備支持的格式， 軟件將保存到本地的公鑰文件rsa進行轉(zhuǎn)換：使用sshkey再將轉(zhuǎn)換后的RSA公鑰配置到交換機上最后，打開PuTTY程序，前面的選項不變，同時要選擇認證參數(shù)，打開本地保存的私鑰文 件 private:點擊Open按鈕，在提示框中只需輸入用戶名ssh2即可:169, 254. U1 - PuTTT匚|旦|區(qū)login as: 38hSent usern；5Ltie rpsshrr|ssh 169 2 54 1 11 s passT-Tord:fr-fr-fr-fr-fr-fr-fr

9、-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr|All rights reserved (1997-2004)* *Wit.liuut the owner 1 s priou written consent.*宙 n口 decLiinpilinijr or reverse-engineer ing shall lue al lowed. *sy

10、sZnter system view, return to user view uith Ctr1+&.Quidwaydisp verHuawei Versatile Routing Platform Software|VRP (R) Software, Version 3,. 10 (iGN) , RELEASE 0009Copyright (c) 2000-2.004 HUAWEI TECH COLTD.Quidway S2O2 6Z-SI uptime is ueek, day, hour,20 minutesQuidway S2O2 6Z-SI uith SOM Arm? Proces

11、sor.3.2 Mbytes 5DRAMlSISSKbytes Flash MeitioryConfigRegister points to FLASH|Hardware Version is Ver.E：169,254. 1- L - PuTTYlogin as: ssh2pent um已rnam已 ppssh2 ”Tryinijr pi.iijlic key authenticati n.N passphrase requireci.,fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-

12、fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr|宰All rights reserved (1997-2004)古亨Without the owner * 1s prior written consent*I*no decompiling or reverse-engineering shal1 toe allowed.*,fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr

13、-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr-fr5UPassword:Now user privilege is 3 levels and just cottiiriands uhich leve 1 isequal to or less than this level can je used.Privileg已 note: U-VISIT, 1-MOMITOR, 2-SYSTEM, 3-MANAGEI a ysEnter system vieu return to user view with Ct.r 1 + Z.QuiclTiTay disp verHuawe i Vera a