HCNA-4 配置通过STelnet登录系统

admin

HCNA-4 配置通过STelnet登录系统

1、基本配置

R1

<Huawei>system-view

[Huawei]sysname R1

[R1]interfaceGigabitEthernet 0/0/0

[R1-GigabitEthernet0/0/0]ipaddress 10.1.1.100 24

[R1-GigabitEthernet0/0/0]return

<R1>save

R2

<Huawei>clocktimezone BJ add 8:00:00

<Huawei>clockdatetime 22:25 2020-04-14

<Huawei>system-view

[Huawei]sysname R2

[R2]header logininformation "ipgzj.com"  //配置登录时标题文本显示

[R2]header shellinformation "zurkj.com"   //配置登录成功后标题文本显示

[R2]interfaceGigabitEthernet 0/0/0

[R2-GigabitEthernet0/0/0]ipaddress 10.1.1.1 24

[R2-GigabitEthernet0/0/0]return

<R2>save

R1

<R1>ping10.1.1.1

  PING 10.1.1.1: 56  data bytes, press CTRL_C to break

    Reply from 10.1.1.1: bytes=56 Sequence=1ttl=255 time=440 ms

    Reply from 10.1.1.1: bytes=56 Sequence=2ttl=255 time=20 ms

    Reply from 10.1.1.1: bytes=56 Sequence=3ttl=255 time=20 ms

    Reply from 10.1.1.1: bytes=56 Sequence=4ttl=255 time=20 ms

    Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=255time=40 ms

  --- 10.1.1.1 ping statistics ---

    5 packet(s) transmitted

    5 packet(s) received

    0.00% packet loss

    round-trip min/avg/max = 20/108/440 ms

2、配置SSH Server

[R2]rsalocal-key-pair create   //生成本地RSA主机密钥对

The key name willbe: Host

% RSA keys definedfor Host already exist.

Confirm to replacethem? (y/n)[n]:y   //确认

The range ofpublic key size is (512 ~ 2048).

NOTES: If the keymodulus is greater than 512,

       It will take a few minutes.

Input the bits inthe modulus[default = 512]:

Generating keys...

............++++++++++++

...........++++++++++++

.................++++++++

.....++++++++

[R2]display rsalocal-key-pair public   //查看本地密钥对中的公钥部分信息

=====================================================

Time of Key pair created: 2020-04-14 22:34:12+08:00  //描述公钥生成的时间

Key name: Host   //描述公钥名称

Key type: RSA encryption Key  //描述公钥类型

=====================================================

Key code:

3047

  0240

    C0D7F0F5 0B7BF723 281F41F8 830C304747FF6508

    EF2521B6 CD885E4D B07DEE2D FE72212977FA2BCA

    6A6104F5 03727704 94E300F3 0E6763A955AC4257

    2CCBBB53

  0203

    010001

=====================================================

Time of Key paircreated: 2020-04-14 22:34:14+08:00

Key name: Server

Key type: RSAencryption Key

=====================================================

Key code:

3067

  0260

    C568360D 59CD85B8 50A59597 2EEA9D5E34F41F68

    CE505383 27E9EEE0 DDF31A1C E7A69FF3146C7A54

    77A07D38 4DEB81ED F22AAA85 577BBD20E4E0AEBB

    F203AEF5 60230524 C1144F3B 20DEE28665A9C20A

    1AB0001F F20DE4BA 2D214C05 9DC5FA7B

  0203

010001

[R2]user-interfacevty 0 4  //配置VTY 用户界面

[R2-ui-vty0-4]authentication-modeaaa   //配置认证模式AAA

[R2-ui-vty0-4]protocolinbound ssh   //指定VTY类型用户界面只支持SSH协议，设备会禁止Telnet功能

[R2]aaa   

[R2-aaa]local-userzurkj password cipher admin1234   //配置本地用户 密码

[R2-aaa]local-userzurkj privilege level 15   //配置本地用户权限级别

[R2-aaa]local-userzurkj service-type ssh   //配置本地用户接入类型为SSH

[R2-aaa]quit

[R2]ssh user zurkjauthentication-type password   //新建SSH用户 指定SSH用户认证模式为密码

[R2]stelnet serverenable   //开启STelnet服务

[R2]display sshuser-information zurkj   //查看SSH用户信息

-------------------------------------------------------------------------------

Username         Auth-type          User-public-key-name

-------------------------------------------------------------------------------

zurkj            password           null                           

-------------------------------------------------------------------------------

[R2]display sshserver status    //查看SSH服务器全局配置信息

SSH version                         :1.99  

SSH connection timeout              :60 seconds

SSH server key generating interval  :0 hours

SSH Authentication retries          :3 times

SFTP Server                         : Disable

Stelnet server                      :Enable

[R2]quit

<R2>save

3、配置SSHClient

<R1>system-view

[R1]ssh clientfirst-time enable   //配置SSH用户端首次认证功能

[R1]stelnet10.1.1.1   //STelnet远程访问

Please input theusername:zurkj

Trying 10.1.1.1...

Press CTRL+K toabort

Connected to10.1.1.1 ...

The server is notauthenticated. Continue to access it? (y/n)[n]:y

Apr 14 202022:54:32-08:00 R1 %%01SSH/4/CONTINUE_KEYEXCHANGE(l)[0]:The server ha

d not beenauthenticated in the process of exchanging keys. When deciding whethe

r to continue, theuser chose Y.

[R1]

Save the server'spublic key? (y/n)[n]:y

The server'spublic key will be saved with the name 10.1.1.1. Please wait...

Apr 14 202022:54:35-08:00 R1 %%01SSH/4/SAVE_PUBLICKEY(l)[1]:When deciding wheth

er to save theserver's public key 10.1.1.1, the user chose Y.

[R1]

ipgzj.com

Enter password:

zurkj.com

<R2>

<R2>displayssh server session    //查看SSH会话连接

--------------------------------------------------------------------

Conn  Ver   Encry     State Auth-type        Username

--------------------------------------------------------------------

VTY 0 2.0   AES       run   password         zurkj                           

--------------------------------------------------------------------

4、配置SFTPServer和Client

<R2>system-view

[R2-aaa]local-useripgzj password cipher admin1234 privilege level 15   //本地用户 密码 权限级别

[R2-aaa]local-useripgzj service-type ssh   //本地用户服务类型 SSH

[R2-aaa]local-useripgzj ftp-directory flash:   //配置用户的可访问目录

[R2-aaa]quit

[R2]sshuser ipgzj authentication-type password  //新建SSH用户 指定SSH用户认证模式为密码

[R2]sftpserver enable   //开启SFTP服务

[R2]displayssh server status   //查看SSH服务器全局信息

SSH version                         :1.99  

SSH connection timeout              :60 seconds

SSH server key generating interval  :0 hours

SSH Authentication retries          :3 times

SFTP Server                         :Enable

Stelnet server                      :Enable

[R2]return

<R2>save

<R1>system-view

[R1]stelnet10.1.1.1  //远程连接STelnet

Pleaseinput the username:ipgzj   //输入用户名

Trying10.1.1.1 ...

PressCTRL+K to abort

Connectedto 10.1.1.1 ...

ipgzj.com

Enterpassword:   //输入密码

zurkj.com

<R2>displayssh server session   //查看SSH会话连接信息

--------------------------------------------------------------------

Conn  Ver   Encry     State Auth-type        Username

--------------------------------------------------------------------

VTY 0 2.0   AES       run   password         ipgzj                           

--------------------------------------------------------------------

<R2>