华为装备ssh协议设置要点儿

*红宝书------华为SSH协议的设置的要点*

路由器使用ssh协议来举行设置

1，须要在服务器上创建ssh账户并开启ssh协议
2，手工设置密钥（保举768以上
3，VTY用户接口下允许开启SSH登录方式

R1设置

1. <Huawei>sys
2. Enter system view, return user view with Ctrl+Z.
3. [Huawei]sysn       
4. [Huawei]sysname r1
5. [r1]interface g0/0/0
6. [r1-GigabitEthernet0/0/0]ip address 202.100.1.1 255.255.255.252
7. Dec 11 2024 18:56:14-08:00 r1 %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP
8. on the interface GigabitEthernet0/0/0 has entered the UP state.
9. [r1-GigabitEthernet0/0/0]q
10. [r1]ping 202.100.1.2
11.   PING 202.100.1.2: 56  data bytes, press CTRL_C to break
12.     Reply from 202.100.1.2: bytes=56 Sequence=1 ttl=255 time=80 ms
13.     Reply from 202.100.1.2: bytes=56 Sequence=2 ttl=255 time=20 ms
14.     Reply from 202.100.1.2: bytes=56 Sequence=3 ttl=255 time=30 ms
15.     Reply from 202.100.1.2: bytes=56 Sequence=4 ttl=255 time=20 ms
16.     Reply from 202.100.1.2: bytes=56 Sequence=5 ttl=255 time=20 ms
18.   --- 202.100.1.2 ping statistics ---
19.     5 packet(s) transmitted
20.     5 packet(s) received
21.     0.00% packet loss
22.     round-trip min/avg/max = 20/34/80 ms
24. [r1]aaa
25. //进入aaa认证
26. [r1-aaa]local-user ender password cipher qytang
27. Info: Add a new user.
28. //创建本地用户ender 密码为qytang
29. [r1-aaa]local-user ender privilege level 15
30. //用户的级别为最高的15级
31. [r1-aaa]local-user ender service-type ssh
32. //该用户用于ssh登录
33. [r1-aaa]q       
34. [r1]ssh user ender authentication-type password
35. //ssh用户ender通过密码进行认证
36. Authentication type setted, and will be in effect next time
37. [r1]stelnet server enable
38. //开启ssh
39. Info: Succeeded in starting the STELNET server.       
40. [r1]rsa local-key-pair create
41. //创建rsa的key
42. The key name will be: Host
43. % RSA keys defined for Host already exist.
44. Confirm to replace them? (y/n)[n]:y
45. The range of public key size is (512 ~ 2048).
46. NOTES: If the key modulus is greater than 512,
47.        It will take a few minutes.
48. Input the bits in the modulus[default = 512]:768
49. Generating keys...
50. ....++++++++
51. .............++++++++
52. ....................+++++++++
53. .....................................................................+++++++++
55. [r1]user-interface vty 0 4
56. //进入VTY通道
57. [r1-ui-vty0-4]au       
58. [r1-ui-vty0-4]authentication-mode aaa
59. //选择AAA认证
60. [r1-ui-vty0-4]p       
61. [r1-ui-vty0-4]pro       
62. [r1-ui-vty0-4]protocol inb       
63. [r1-ui-vty0-4]protocol inbound ssh
64. //vty允许SSh登录
65. [r1-ui-vty0-4]
66. Dec 11 2024 19:02:14-08:00 r1 %%01SSH/4/SSH_FAIL(l)[1]:Failed to log in through
67. SSH. (Ip=202.100.1.2, UserName=ender, Times=16777216).
69. [r1-ui-vty0-4]q
70. [r1]save
71.     ^
72. Error: Unrecognized command found at '^' position.
73. [r1]q
74. <r1>save

复制代码

r2

1. <Huawei>sys
2. Enter system view, return user view with Ctrl+Z.
3. [Huawei]sysn       
4. [Huawei]sysname r2
5. [r2]in       
6. [r2]inte       
7. [r2]interface g0/0/0
8. [r2-GigabitEthernet0/0/0]ip address 202.100.1.2 255.255.255.252
9. [r2]stelnet 202.100.1.1
10. Please input the username:ender
11. Trying 202.100.1.1 ...
12. Press CTRL+K to abort
13. Connected to 202.100.1.1 ...
14. Error: Failed to verify the server's public key.
15. Please run the command "ssh client first-time enable"to enable the first-time ac
16. cess function and try again.
17. [r2]
18. [r2]ssh client first-time enable
19. //启用SSH客户端首次登录时的提示
20. [r2]stelnet 202.100.1.1
21. Please input the username:ender
22. Trying 202.100.1.1 ...
23. Press CTRL+K to abort
24. Connected to 202.100.1.1 ...
25. The server is not authenticated. Continue to access it? (y/n)[n]:y
26. Dec 11 2024 19:01:54-08:00 r2 %%01SSH/4/CONTINUE_KEYEXCHANGE(l)[1]:The server ha
27. d not been authenticated in the process of exchanging keys. When deciding whethe
28. r to continue, the user chose Y.
29. [r2]
30. Save the server's public key? (y/n)[n]:y
31. The server's public key will be saved with the name 202.100.1.1. Please wait...
33. Dec 11 2024 19:02:10-08:00 r2 %%01SSH/4/SAVE_PUBLICKEY(l)[2]:When deciding wheth
34. er to save the server's public key 202.100.1.1, the user chose Y.
35. [r2]
36. Enter password:
37. Enter password:
38. <r1>display user
39.             ^
40. Error:Ambiguous command found at '^' position.
41. <r1>
42. <r1>display use       
43. <r1>display users
44.   User-Intf    Delay    Type   Network Address     AuthenStatus    AuthorcmdFlag
45.   0   CON 0   00:02:06                                   pass                  
46.   Username : Unspecified
48. + 130 VTY 1   00:00:00  SSH    202.100.1.2               pass                  
49.   Username : ender               

复制代码

Username : Unspecified

• 130 VTY 1   00:00:00  SSH    202.100.1.2               pass
  Username : ender
  

[code][/code]