When switch acts as client for password authentication

As shown in Figure 87, Switch A (the SSH client) must pass password authentication to log in to Switch B (the SSH server) through the SSH protocol. Configure the username client001 and the password aabbcc for the SSH client on Switch B.

# Generate RSA key pairs.

<SwitchB> system-view
[SwitchB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++
++++++++++++++
+++++
++++++++

# Generate a DSA key pair.

[SwitchB] public-key local create dsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++

# Enable the SSH server.

[SwitchB] ssh server enable

# Configure an IP address for VLAN-interface 1, which the SSH client will use as the destination for SSH connection.

[SwitchB] interface vlan-interface 1
[SwitchB-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[SwitchB-Vlan-interface1] quit

# Set the authentication mode for the user interfaces to AAA.

[SwitchB] user-interface vty 0 15
[SwitchB-ui-vty0-15] authentication-mode scheme

# Enable the user interfaces to support SSH.

[SwitchB-ui-vty0-15] protocol inbound ssh
[SwitchB-ui-vty0-15] quit

# Create local user client001.

[SwitchB] local-user client001
[SwitchB-luser-client001] password simple aabbcc
[SwitchB-luser-client001] service-type ssh
[SwitchB-luser-client001] authorization-attribute level 3
[SwitchB-luser-client001] quit

# Specify the service type for user client001 as stelnet, and the authentication method as password. This step is optional.

[SwitchB] ssh user client001 service-type stelnet authentication-type password

# Configure an IP address for VLAN-interface 1.

<SwitchA> system-view
[SwitchA] interface vlan-interface 1
[SwitchA-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[SwitchA-Vlan-interface1] quit
[SwitchA] quit

# Establish a connection between the SSH client and the SSH server:

• If the client supports first-time authentication, you can directly establish a connection from the client to the server.

  # Establish an SSH connection to server 10.165.87.136.

  <SwitchA> ssh2 10.165.87.136
  Username: client001
  Trying 10.165.87.136 ...
  Press CTRL+K to abort
  Connected to 10.165.87.136 ...
  
  The Server is not authenticated. Continue? [Y/N]:y
  Do you want to save the server public key? [Y/N]:n
  Enter password:
  

  After you enter the correct password, you can log in to Switch B successfully.

• If the client does not support first-time authentication, perform the following configurations.

  # Disable first-time authentication.

  [SwitchA] undo ssh client first-time
  

  # Configure the host public key of the SSH server. You can get the server host public key by using the display public-key local dsa public command on the server.

  [SwitchA] public-key peer key1
  [SwitchA-pkey-public-key] public-key-code begin
  [SwitchA-pkey-key-code]308201B73082012C06072A8648CE3804013082011F0281810
  0D757262C4584C44C211F18BD96E5F0
  [SwitchA-pkey-key-code]61C4F0A423F7FE6B6B85B34CEF72CE14A0D3A5222FE08CECE
  65BE6C265854889DC1EDBD13EC8B274
  [SwitchA-pkey-key-code]DA9F75BA26CCB987723602787E922BA84421F22C3C89CB9B0
  6FD60FE01941DDD77FE6B12893DA76E
  [SwitchA-pkey-key-code]EBC1D128D97F0678D7722B5341C8506F358214B16A2FAC4B3
  68950387811C7DA33021500C773218C
  [SwitchA-pkey-key-code]737EC8EE993B4F2DED30F48EDACE915F0281810082269009E
  14EC474BAF2932E69D3B1F18517AD95
  [SwitchA-pkey-key-code]94184CCDFCEAE96EC4D5EF93133E84B47093C52B20CD35D02
  492B3959EC6499625BC4FA5082E22C5
  [SwitchA-pkey-key-code]B374E16DD00132CE71B020217091AC717B612391C76C1FB2E
  88317C1BD8171D41ECB83E210C03CC9
  [SwitchA-pkey-key-code]B32E810561C21621C73D6DAAC028F4B1585DA7F42519718CC
  9B09EEF0381840002818000AF995917
  [SwitchA-pkey-key-code]E1E570A3F6B1C2411948B3B4FFA256699B3BF871221CC9C5D
  F257523777D033BEE77FC378145F2AD
  [SwitchA-pkey-key-code]D716D7DB9FCABB4ADBF6FB4FDB0CA25C761B308EF53009F71
  01F7C62621216D5A572C379A32AC290
  [SwitchA-pkey-key-code]E55B394A217DA38B65B77F0185C8DB8095522D1EF044B465E
  8716261214A5A3B493E866991113B2D
  [SwitchA-pkey-key-code]485348
  [SwitchA-pkey-key-code] public-key-code end
  [SwitchA-pkey-public-key] peer-public-key end
  

  # Specify the host public key for the SSH server 10.165.87.136 as key1.

  [SwitchA] ssh client authentication server 10.165.87.136 assign publickey key1
  [SwitchA] quit
  

  # Establish an SSH connection to server 10.165.87.136.

  <SwitchA> ssh2 10.165.87.136
  Username: client001
  Trying 10.165.87.136
  Press CTRL+K to abort
  Connected to 10.165.87.136...
  Enter password: 
  

  After you enter the correct password, you can log in to Switch B successfully.