
配置SSH# 生成RSA 密钥对。system-view[Router] public-key local create rsaThe range of public key size is (512 ~ 2048).NOTES: If the key modulus is greater than 512,1-13It will take a few minutes.Press CTRL+C to abort.Input the bits of the modulus[default = 1024]:Generating Keys...+++++++++++++++++++++++++++++++++++# 生成DSA 密钥对。[Router] public-key local create dsaThe range of public key size is (512 ~ 2048).NOTES: If the key modulus is greater than 512,It will take a few minutes.Press CTRL+C to abort.Input the bits of the modulus[default = 1024]:Generating Keys...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++# 启动SSH 服务器。[Router] ssh server enable
# 设置SSH 客户端登录用户界面的认证方式为AAA认证。[Router] user-interface vty 0 4[Router-ui-vty0- 4] authentication-mode scheme# 设置Router 上远程用户登录协议为SSH。[Router-ui-vty0-4] protocol inbound ssh[Router-ui-vty0-4] quit#创建本地用户client001,并设置用户访问的命令级别为3。[Router] local-user client001[Router-luser-client001] password simple aabbcc[Router-luser-client001] service-type ssh[Router-luser-client001] authorization-attribute level 3[Router-luser-client001] quit# 配置SSH 用户client001的服务务器类型为Stelnet,认证方式为password 认证。(此步骤可以不配置)[Router] ssh user client001 service-type stelnetauthentication-type password