5110-2-ssh增配

<H3C_5110_48_L2_2>sys
System View: return to User View with Ctrl+Z.
[H3C_5110_48_L2_2]ssh server enable --------------(1)开启ssh服务

[H3C_5110_48_L2_2]local-user h3c
[H3C_5110_48_L2_2-luser-manage-h3c]dis this
#
local-user h3c class manage
password hash $h$6$3D1AYB0tIG4ReCHq$jbl2kCqzTVMPdlaF7YRUqZ5sq0pfovzd5Nnk1+G4L/S1Kga09sVtydKzyp1knkwlI9KTVostktnTkNA7ieuW4A==
service-type telnet----------------------------对比
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
return

[H3C_5110_48_L2_2-luser-manage-h3c]service-type telnet ?
http HTTP service type
https HTTPS service type
pad X.25 PAD service
ssh Secure Shell service
terminal Terminal access service
<cr>

[H3C_5110_48_L2_2-luser-manage-h3c]service-type telnet ssh ?
http HTTP service type
https HTTPS service type
pad X.25 PAD service
terminal Terminal access service
<cr>

[H3C_5110_48_L2_2-luser-manage-h3c]service-type telnet ssh --------(2)给用户名增加ssh登录类型
[H3C_5110_48_L2_2-luser-manage-h3c]dis this
#
local-user h3c class manage
password hash $h$6$3D1AYB0tIG4ReCHq$jbl2kCqzTVMPdlaF7YRUqZ5sq0pfovzd5Nnk1+G4L/S1Kga09sVtydKzyp1knkwlI9KTVostktnTkNA7ieuW4A==
service-type telnet ssh
authorization-attribute user-role level-15
authorization-attribute user-role network-operator
#
return

[H3C_5110_48_L2_2]public-key local create rsa -----------(3)密钥对已经存在 说明以前创建过 这里忽略 不再创建
The local key pair already exists.
Confirm to replace it? [Y/N]:n

所以旧telnet配置增加ssh远程登录只需要2步
(1)启用ssh服务
(2)给登录用户增加ssh方式登录
说明vty只需要scheme方式登录即可,不需要在telnet基础上有任何修改
完全新的ssh配置需要四步
(1)启用ssh服务
(2)建立登录用户并配置该用户为ssh方式(可多种方式在一条命令中)
(3)vty中配置为scheme方式认证(用户名+密码)
(4)密钥的创建