Huawei switches are configured with SSH login remote management switches

Configure Huawei switches ssh Remote login , First configure the management address and vlan, Here is vlan10 , Interface GE0/0/1 Transfer in vlan10, The management address is 192.168.10.100/241、 Create a local key pair

Configure the access switch ssh

One 、 Configuration management address and interface vlan
[SW1]vlan 10
[SW1]interface vlan 10
[SW1-Vlanif10]ip address 192.168.10.100 24

[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 10

Two 、 Turn on stelnet jurisdiction
[SW1]stelnet server enable

3、 ... and 、 Create a local key pair
[SW1]rsa local-key-pair create

Four 、 establish ssh The user is called user
[SW1]ssh user user // Create user
[SW1]ssh user user authentication-type password // Create user authentication as password authentication
[SW1]ssh user user service-type stelnet // The service type is ssh

5、 ... and 、 Get into aaa Configure users in mode

[SW1]aaa // Get into aaa Pattern
[SW1-aaa]local-user user password cipher user123 // Configure the user password to user123
[SW1-aaa]local-user user privilege level 15 // Configure user permission levels
[SW1-aaa]local-user user service-type ssh // Allow users ssh Access right

6、 ... and 、 To configure vty Login protocols supported by the interface
[SW1]user-interface vty 0 4
[SW1-ui-vty0-4]authentication-mode aaa // Certification for aaa
[SW1-ui-vty0-4]protocol inbound ssh // The login agreement is ssh Log in

7、 ... and 、 Sign in ssh management
adopt xshell Login with other tools
 

Configure the core switch ssh

1、 Create a local key pair

[Core-SW]rsa local-key-pair create
The key name will be: Core-SW_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
it will take a few minutes.
Input the bits in the modulus[default = 2048]:
Generating keys...
..+++++
........................++
....++++
...........++
2、 Check for presence SSH user（ Skippable ）, System prompt: no SSH user There is

[Core-SW]dis ssh user-information
Info: No SSH user exists.
3、 establish SSH user

[Core-SW]ssh user test \ You can just hit the second line
[Core-SW]ssh user test authentication-type password \ The authentication mode is password authentication
[Core-SW]ssh user test service-type stelnet \ The service type is stelnet, namely SSH
4、 Create user

[Core-SW]aaa
[Core-SW-aaa]local-user test password cipher xxx（xxx Here is the password you want to set )
Info: Add a new user.
[Core-SW-aaa]local-user test privilege level 3 \ user level Up to 15
[Core-SW-aaa]local-user test service-type ?
8021x 802.1x user
bind Bind authentication user
ftp FTP user
http Http user
ppp PPP user
ssh SSH user
telnet Telnet user
terminal Terminal user
web Web authentication user
x25-pad X25-pad user
[Core-SW-aaa]local-user test service-type ssh \ Enable this user to allow SSH Access to the device
5、 Enable SSH（stelnet） service

[Core-SW]stelnet server enable
Info: Succeeded in starting the Stelnet server.
6、 To configure vty Login protocols supported by the interface

[Core-SW]user-interface vty 0 4
[Core-SW-ui-vty0-4]authentication-mode aaa
[Core-SW-ui-vty0-4]protocol inbound ssh