交換機(jī)ssh典型配置案例

交換機(jī)SSH應(yīng)用配置：網(wǎng)絡(luò)連接：SSH終端與交換機(jī)建立本地連接，能ping通交換機(jī)即可。交換機(jī)及終端配置過程：在交換機(jī)上，SSH支持的認(rèn)證方式有兩種，分別為口令認(rèn)證和RSA認(rèn)證。此處采用的SSH客戶端為免費(fèi)的putty程序。1、口令認(rèn)證方式：交換機(jī)上的配置：[Quidway]rsalocal-key-paircreate[Quidway]user-interfacevty04[Quidway-ui-vty0-4]authentication-modescheme[Quidway-ui-vty0-4]protocolinboundssh[Quidway]local-userssh1[Quidway-luser-ssh1]passwordsimplehuawei[Quidway-luser-ssh1]service-typessh[Quidway]sshuserssh1authentication-typepassword注：此時(shí)添加的ssh用戶ssh1的級(jí)別為默認(rèn)的級(jí)別1，如果想要管理交換機(jī)還需在交換機(jī)上配置superpassword；也可以直接配置ssh1的級(jí)別為最高的level3：[Quidway-luser-ssh1]service-typesshlevel3客戶端的配置：在HostName處輸入交換機(jī)的ip地址：

交換機(jī)支持的SSH版本只能為1：在下面的界面里面選擇驗(yàn)證方式為SSH1，不選擇驗(yàn)證參數(shù)：?jiǎn)螕鬙pen按鈕，出現(xiàn)登陸提示框，輸入用戶名及密碼即可:芒169.254.1.1-PuTTTS2O2?6Z-SIuptimeis□ueek,□day,□hour,20minutesHardwareVersionisVer.ES2.O2^6Z-SI-withSOMArm?ProcessorbytesSDRAM芒169.254.1.1-PuTTTS2O2?6Z-SIuptimeis□ueek,□day,□hour,20minutesHardwareVersionisVer.ES2.O2^6Z-SI-withSOMArm?ProcessorbytesSDRAMbytesFlashMemoryloginas:sshSentusernattie,r33hrrssh@169 .1.11spassword^Ouidway32M8ZL92EConfigRegisterpointstoFLASHAllrightsreserved(1997-2004)Withouttheowner1sprioruritnenconsentf?nodecompilingorreverse-engine已匕ingshall]□已a(bǔ)llowed.*卞卞吉卞卞吉卞卞吉卞卞卞卞卞卞吉卞卞吉卞卞吉卞卞卞卞卞卞卞卞卞吉卞卞吉卞卞吉卞卞卞卞卞卞卞卞卞吉卞卞吉卞卞吉卞卞卞<QuidTiT；=Ly>sysEntersystemview,returntouserviewwithCtrl+Z?[QuidTiTay]clispverHuaweiVersatileF'□utingPlatf□irmS□ftware|VRP(R)Software,Version3.1U(CN),RELEASEUUU9iCopyright(c)2UUU-20U4HUAT.TEITECHC0?』LTD.iQuidiiTay2、RSA認(rèn)證方式：交換機(jī)的配置：[Quidway]local-userssh2[Quidway-luser-ssh2]service-typessh[Quidway]user-interfacevty04[Quidway-ui-vty0-4]authentication-modesheme[Quidway-ui-vty0-4]protocolinboundssh[Quidway]sshuserssh2authentication-typeRSA[Quidway]rsapeer-public-keyrsa[Quidway-rsa-public]public-key-codebegin[Quidway-key-code]308186028180524E0D488D016B5B880524287324CBB9A613[Quidway-key-code]CE64415584CC73E5C2055B02457A3A86DA794B4AA2FBE8AB[Quidway-key-code]3AC42F47F2F58F38369F89859A15B90403829B6231F0EDE2[Quidway-key-code]8F275DC9B48B1C64CCB504F09967B7A9991DF16B1846C71E[Quidway-key-code]2B61E744CF08F7A3BC774148D84F7681CF5B112D2F219ED5[Quidway-key-code]9474DE71E8C0A4FD0C75073DF421020125[Quidway-key-code]public-key-codeend[Quidway-rsa-public]peer-public-keyend[Quidway]sshuserssh2assignrsa-keyrsa客戶端配置：首先使用一個(gè)PuTTYKeyGenerator的軟件，生成公鑰和私鑰，再分別將兩個(gè)密鑰保存為本地文件，名為rsa和private：KeyPubJic：：keyforpacingintoauthorizedkeys：file:KeyPubJic：：keyforpacingintoauthorizedkeys：file:1023.37 .577964593975327012389207196003356507576732372093011C424182390267319603642374012354987963^311215300060743132286565113761430537767196470392SS7219794S344S47102145^73057845310612^304745514474S477717597781069111173417045406701019517149123254012291770S2S19228464288410025394020兇_.忖vl_Keyfjngerprint:Keyccrnnment:Kevpassphrase:Confirmpassphrase:Actio門嚴(yán)Generateapublip/privatekeypairLoadanexistingprivatekeyfileSavethegeneratedkeyParameter^Typeofkeytogenerate:?SSH1(RSAf OS^H2RSA OSSH2'^SANumberofbita.jnageneratedkev： 1024使用sshkey由于生成的密鑰是通用的格式，因此還需要將這些密鑰轉(zhuǎn)換成我司設(shè)備支持的格式，軟件將保存到本地的公鑰文件rsa進(jìn)行轉(zhuǎn)換：使用sshkey再將轉(zhuǎn)換后的RSA公鑰配置到交換機(jī)上最后，打開PuTTY程序，前面的選項(xiàng)不變，同時(shí)要選擇認(rèn)證參數(shù)，打開本地保存的私鑰文件private：點(diǎn)擊Open按鈕，在提示框中只需輸入用戶名ssh2即可:A-163.254-1-1-PuTTYloginS3:ssh2Sentuaerniiunerp53h2Tryinijrpi.iijlickeyauthenticati□n?Nopassphras已:r已匚pii匸已日.*nodeccunpilingorreverse-engineeringshal1beallowed■孟<QuiLlTiT：=Ly>suPas5word:Entersystemview,returntouserviewwithCtr1+Z?[QuiclTiTay]dispverHuaweiVersatileRoutingPlatf□rmS□ftwarejVRPi：P.：iSoftware,Version3.1U(CN：i,RELEASEUUU9iCopyright(c)2000-2004HUAIJEITECHC0?*LTD?iQuiclT.TayS2026Z-SIuptitneisuweek^u 1hour78minutesAllright-srese匚￥已匚1 (1997-2004)Withoutt-heowner1sprio