Object

Requirements

 

Configure the IP address of the VLAN interface, and make sure the SSH server

SSH server

and client can reach each other.

 

Configure the authentication mode and other settings.

 

 

SSH client

Run the SSH client program.

 

Obtain the IP address of the VLAN interface on the server.

 

 

 

By default, the device is enabled with the SSH server and client functions.

•On a device that serves as the SSH client, you can log in to an SSH server to perform operations on the server.

•On a device that serves as the SSH server, you can configure the authentication mode and user level for SSH users. By default, password authentication is adopted for SSH login, but no login password is configured, so you cannot log in to the device through SSH by default. Before you can log in to the device through SSH, you need to log in to the device through the console port and configure the authentication mode, user level, and common settings.

This section includes these topics:

•Configuring the SSH server

•Configuring the SSH client to log in to the SSH server

Configuring the SSH server

Configuration prerequisites

You have logged in to the device, and want to log in to the device through SSH in the future.

By default, you can log in to the device through the console port without authentication and have user privilege level 3 after login. For information about logging in to the device with the default configuration, see “Configuration requirements.”

Configuration procedure

Follow these steps to configure the device that serves as an SSH server:

To do…

Use the command…

Remarks

Enter system view

system-view

—

 

 

 

 

 

Required

Create local key pair(s)

public-key local create { dsa rsa }

By default, no local key pair(s) are

 

 

created.

 

 

 

Enable SSH server

ssh server enable

Required

By default, SSH server is disabled.

 

 

 

 

 

Enter one or more VTY user

user-interface vty first-number

—

interface views

[ last-number ]

 

 

 

 

Specify the scheme authentication

 

Required

authentication-mode scheme

By default, authentication mode for

mode

 

VTY user interfaces is password.

 

 

 

 

 

48