17课：登录管理--ssh登录

step1: 开启SSH服务

[USG6000V1]stelnet server enable

Info: Succeeded in starting the Stelnet server.

[USG6000V1]

Jan 25 2018 09:05:46 USG6000V1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25

.191.3.1 configurations have been changed. The current change number is 13, the

change loop count is 0, and the maximum number of records is 4095.

step2: 配置ssh user 属性

[USG6000V1]ssh user shuawei

Info: Succeeded in adding a new SSH user.

[USG6000V1]

Jan 25 2018 09:07:06 USG6000V1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25

.191.3.1 configurations have been changed. The current change number is 14, the

change loop count is 0, and the maximum number of records is 4095.

[USG6000V1]ssh user shuawei au

[USG6000V1]ssh user shuawei authen

[USG6000V1]ssh user shuawei authentication-type password

[USG6000V1] ssh user huawei authentication-type

[USG6000V1]dis ssh user

User 1:

User Name : shuawei

Authentication-type : password

User-public-key-name : -

User-public-key-type : -

Sftp-directory : -

Service-type : stelnet

Authorization-cmd : No password

[USG6000V1] ssh user huawei service-type stelnet

clipboard.png

step3 创建ssh user

aaa

manager-user shuawei

password cipher yourpassword

service-type telnet

level 15

step4：创建vty下的策略

[USG6000V1]user-interface vty 0 4

[USG6000V1-ui-vty0-4]

user-interface vty 0 4

authentication-mode aaa

user privilege level 15

user privilege level 15

protocal inbound ssh

step5：把接口分配到trust区域

firewall zone trust

add interface GigabitEthernet0/0/0

step6 使用xshell进行登录

初次登录需要修改密码，直接登录即可。