Juniper配置SSH密钥登录

SSH密钥登录配置

开启SSH登录服务并禁用SSH基于密码登录

set system services ssh no-passwords

创建登录用户并定义用户登录类

# 创建登录用户test并定义test为超级用户
set system login user test class super-user

配置ssh公钥加密认证

set system login user test authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVSt+w3TVITosq79l6lRXYTU3AWVvTHcJhwsd8qGzZx9BumjHmCThQCo+/jJmDDBUcGasG4ZySSPBnH97i2K6nJ7AcEAGr9y4uvpmcBPjNcGVW9oaUuqupWiX/1Daz2ChCZOiTo19fbNX7mNdh29abDMSmH+gumnHnU2jeFLKtQrPNaxK8ja6V3kl93scYTt0pnl/IOrtA0s3FHVMproHfHFVA1zO3hozO9ZZw6mFOF2PXvE2t64zrxupdnUli3H4HdyLR6XgsQjB/thDFmUgEW2ISFkwvHKg6G3QHSP/EMFQQlTy/J+SrjSqLq9Bq5Qs5GlGk2mTFj+29guv9DIw9 rsa-key-20221102"

验证配置

show system services | display set
show system login user <username> | display set

root# show system services | display set                       
set system services ssh no-passwords
root# show system login user test | display set                
set system login user test uid 2001
set system login user test class super-user
set system login user test authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVSt+w3TVITosq79l6lRXYTU3AWVvTHcJhwsd8qGzZx9BumjHmCThQCo+/jJmDDBUcGasG4ZySSPBnH97i2K6nJ7AcEAGr9y4uvpmcBPjNcGVW9oaUuqupWiX/1Daz2ChCZOiTo19fbNX7mNdh29abDMSmH+gumnHnU2jeFLKtQrPNaxK8ja6V3kl93scYTt0pnl/IOrtA0s3FHVMproHfHFVA1zO3hozO9ZZw6mFOF2PXvE2t64zrxupdnUli3H4HdyLR6XgsQjB/thDFmUgEW2ISFkwvHKg6G3QHSP/EMFQQlTy/J+SrjSqLq9Bq5Qs5GlGk2mTFj+29guv9DIw9 rsa-key-20221102"

软件使用密钥登录

软件使用SSH密钥登录方法

配置模板

set system services ssh no-passwords
set system login user test class super-user
set system login user test authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVSt+w3TVITosq79l6lRXYTU3AWVvTHcJhwsd8qGzZx9BumjHmCThQCo+/jJmDDBUcGasG4ZySSPBnH97i2K6nJ7AcEAGr9y4uvpmcBPjNcGVW9oaUuqupWiX/1Daz2ChCZOiTo19fbNX7mNdh29abDMSmH+gumnHnU2jeFLKtQrPNaxK8ja6V3kl93scYTt0pnl/IOrtA0s3FHVMproHfHFVA1zO3hozO9ZZw6mFOF2PXvE2t64zrxupdnUli3H4HdyLR6XgsQjB/thDFmUgEW2ISFkwvHKg6G3QHSP/EMFQQlTy/J+SrjSqLq9Bq5Qs5GlGk2mTFj+29guv9DIw9 rsa-key-20221102"

References

1. https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/junos-os-login-class.html
2. http://blog.sina.com.cn/s/blog_7ed5d53b0102xfje.html