R3303-HP HSR6800 Routers Security Configuration Guide

ManualsBrandsHP ManualsNetwork HardwareHP HSR68xx Configure-to-Order Router Solution

331

332

333

334

335

336

337

338

339

340

323

<Router> system-view

[Router] public-key local create rsa

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

It will take a few minutes.

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

++++++++++++++++++++++++

+++++++++++++++++++++++

+++++

# Generate a DSA key pair.

[Router] public-key local create dsa

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

It will take a few minutes.

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++

# Enable the SSH server function.

[Router] ssh server enable

# Configure an IP address for interface GigabitEthernet 3/0/1. The Stelnet client uses this address

as the destination for SSH connection.

[Router] interface gigabitethernet 3/0/1

[Router-GigabitEthernet3/0/1] ip address 192.168.1.40 255.255.255.0

[Router-GigabitEthernet3/0/1] quit

# Set the authentication mode for the user interface to AAA.

[Router] user-interface vty 0 4

[Router-ui-vty0-4] authentication-mode scheme

# Enable the user interface to support SSH.

[Router-ui-vty0-4] protocol inbound ssh

[Router-ui-vty0-4] quit

# Create a local user client001 with the password as aabbcc and service type as ssh.

[Router] local-user client001

[Router-luser-client001] password simple aabbcc

[Router-luser-client001] service-type ssh

[Router-luser-client001] quit

# Specify the service type for the user client001 as stelnet, and the authentication method as

password. (Optional. If an SSH user is not created, password authentication is used by default.)

[Router] ssh user client001 service-type stelnet authentication-type password

2. Establish a connection to the Stelnet server:

The device supports different types of Stelnet client software, such as PuTTY, and OpenSSH. The

following example takes PuTTY version 0.58 on the Stelnet client.