04.H3C配置ssh服务
1.使能SSH服务器功能
[H3C]ssh server enable
2.配置SSH客户端登录时的用户界面
# [H3C]user-interface vty 0 63 # 这俩命令实现是一样的，只是老版本里用的是user-interface vty，新版本改为了line vty，新版本也只是为了兼容旧版本保留了user-interface vty [H3C]line vty 0 63 [H3C-line-vty0-63]authentication-mode scheme [H3C-line-vty0-63]protocol inbound ssh
3.配置SSH用户
[H3C]local-user wuqun New local user added. [H3C-luser-manage-wuqun]password simple 123 [H3C-luser-manage-wuqun]service-type ssh [H3C-luser-manage-wuqun]authorization-attribute user-role network-admin [H3C-luser-manage-wuqun]
4.配置RSA秘钥
生成RSA秘钥
[H3C]public-key local create rsa导出RSA秘钥
[H3C]public-key local export rsa ssh2 ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "rsa-key-2022/01/13" AAAAB3NzaC1yc2EAAAADAQABAAAAgQC3E1Ef9XS9oXgJZ19/TUbpf8sxZRNdeBdee56fFFol2c18v/aGeDKKwXgQKtwlvIfyQTKA0o8JbmUkoycmmYO9Ud3jssd1p/tYgDXR2U4sqSKMlTvULUSdZiS5OsZTckGfBiCJBF49Cabwz1dbiko2vURe5FbWqMP39JtM0GaRtw== ---- END SSH2 PUBLIC KEY ----销毁RSA秘钥
[H3C]public-key local destroy rsa Confirm to destroy the key pair? [Y/N]:
5.配置IP客户端SSH登录
[H3C]interface GigabitEthernet 0/0 [H3C-GigabitEthernet0/0]ip address 10.0.0.2 8客户端登录
ssh xxxxx