3Com Switch 8800 Advanced Software V5 Configuration Guide

SSH Server Configuration Examples 959
SSH Server
Configuration
Examples
Network requirements
As shown in Figure 292, establish a local connection between the terminal (SSH
client) and the Ethernet switch. The terminal logs into the switch through SSH, so
as to ensure security of data exchange. For the SSH client, the username is
“client001”, and the password is “aabbccddeeff”.
Network diagram
Figure 292 Local configuration of SSH
Configuration procedure
1 Configure the SSH server, Switch
# Generate a key pair and enable the SSH server.
<Switch> system-view
[Switch] rsa local-key-pair create
[Switch] ssh server enable
# Assign an IP address to the Vlan-interface 1. The client will be connected to the
SSH server through this address.
[Switch] interface vlan-interface 1
[Switch-Vlan-interface1] ip address 192.168.0.1 255.255.255.0
[Switch-Vlan-interface1] quit
The IP address of the client host and the IP address of the VLAN interface on the
switch must be in a network segment. It is set to 192.168.0.2.
2 Configure the password authentication mode for the SSH user
# Configure the SSH client to log into the user interface through AAA
[Switch] user-interface vty 1
[Switch-ui-vty1] authentication-mode scheme
# Set the remote user login protocol on the switch to SSH.
[Switch-ui-vty1] protocol inbound ssh
[Switch-ui-vty1] quit
# Create a local user named “client001”.
[Switch] local-user client001
[Switch-luser-client001] password simple aabbccddeeff
[Switch-luser-client001] service-type ssh level 3
[Switch-luser-client001] quit
[Switch] ssh user client001 authentication-type password
SSH client SSH server
Host Switch
192.168.0.2/24
Vlan-int1
192.168.0.1/24