3Com WX3000 operation manual SSH Configuration Examples, # Generate RSA and DSA key pairs

SSH Configuration Examples

When the Device Acts as the SSH Server and the Authentication Type is Password

Network requirements

As shown in Figure 1-12, establish an SSH connection between the host (SSH Client) and the device (SSH Server) for secure data exchange. The host runs SSH2.0 client software. Password authentication is required.

Figure 1-12Network diagram of SSH server configuration using password authentication

192 .168 .0 .2/24

	VLAN-Interface 1
SSH Client	192.168.0.1/24	Switch

Configuration procedure

zConfigure the SSH server

#Create a VLAN interface on the device and assign an IP address, which the SSH client will use as the destination for SSH connection.

<device> system-view

[device] interface vlan-interface 1 [device-Vlan-interface1] ip address 192.168.0.1 255.255.255.0

[device-Vlan-interface1] quit

# Generate RSA and DSA key pairs.

[device] public-key local create rsa

[device] public-key local create dsa

# Set the authentication mode for the user interfaces to AAA.

[device] user-interface vty 0 4

[device-ui-vty0-4] authentication-mode scheme

# Enable the user interfaces to support SSH.

[device-ui-vty0-4] protocol inbound ssh

[device-ui-vty0-4] quit

#Create local client “client001”, and set the authentication password to “abc”, protocol type to SSH, and command privilege level to 3 for the client.

[device] local-user client001

[device-luser-client001] password simple abc

[device-luser-client001] service-type ssh level 3

[device-luser-client001] quit

# Specify the authentication method of user client001 as password.

[device] ssh user client001 authentication-type password

zConfigure the SSH client

#Configure an IP address (192.168.0.2 in this case) for the SSH client. This IP address and that of the VLAN interface on the device must be in the same network segment.

#Configure the SSH client software to establish a connection to the SSH server.

1-22