Password authentication enabled Stelnet client configuration example

As shown in Figure 99:

• You can log in to Switch B through the Stelnet client that runs on Switch A.

• Switch B acts as the Stelnet server and uses password authentication.

• The username and password of Switch A are saved on Switch B.

# Generate RSA key pairs.

<SwitchB> system-view
[SwitchB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++
++++++++++++++
+++++
++++++++

# Generate a DSA key pair.

[SwitchB] public-key local create dsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++

# Enable the SSH server function.

[SwitchB] ssh server enable

# Configure an IP address for VLAN-interface 2. The Stelnet client uses this address as the destination address of the SSH connection.

[SwitchB] interface vlan-interface 2
[SwitchB-Vlan-interface2] ip address 192.168.1.40 255.255.255.0
[SwitchB-Vlan-interface2] quit

# Set the authentication mode to AAA for the user interfaces.

[SwitchB] user-interface vty 0 15
[SwitchB-ui-vty0-15] authentication-mode scheme

# Enable the user interface to support SSH.

[SwitchB-ui-vty0-15] protocol inbound ssh
[SwitchB-ui-vty0-15] quit

# Create a local user client001. Specify the password as aabbcc and the service type as ssh for the user.

[SwitchB] local-user client001
[SwitchB-luser-client001] password simple aabbcc
[SwitchB-luser-client001] service-type ssh
[SwitchB-luser-client001] quit

# Create an SSH user client001. Specify the service type as stelnet and the authentication method as password for the user.

[SwitchB] ssh user client001 service-type stelnet authentication-type password

# Configure an IP address for VLAN-interface 2.

<SwitchA> system-view
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 192.168.1.56 255.255.255.0
[SwitchA-Vlan-interface2] quit
[SwitchA] quit

# Establish a connection to the Stelnet server:

• If the client supports first-time authentication, you can directly establish a connection from the client to the server.

  # Establish an SSH connection to server 192.168.1.40.

  <SwitchA> ssh2 192.168.1.40
  Username: client001
  Trying 192.168.1.40 ...
  Press CTRL+K to abort
  Connected to 192.168.1.40 ...
  
  The Server is not authenticated. Continue? [Y/N]:y
  Do you want to save the server public key? [Y/N]:n
  Enter password:
  

  After you enter the correct password, you can log in to Switch B successfully.

• If the client does not support first-time authentication, perform the following configurations.

  # Disable first-time authentication.

  [SwitchA] undo ssh client first-time
  

  # Configure the host public key of the SSH server. You can get the server host public key by using the display public-key local dsa public command on the server. By default, the Stelnet client uses the DSA server host public key to authentication the server.

  [SwitchA] public-key peer key1
  [SwitchA-pkey-public-key] public-key-code begin
  [SwitchA-pkey-key-code]308201B73082012C06072A8648CE3804013082011F0281810
  0D757262C4584C44C211F18BD96E5F0
  [SwitchA-pkey-key-code]61C4F0A423F7FE6B6B85B34CEF72CE14A0D3A5222FE08CECE
  65BE6C265854889DC1EDBD13EC8B274
  [SwitchA-pkey-key-code]DA9F75BA26CCB987723602787E922BA84421F22C3C89CB9B0
  6FD60FE01941DDD77FE6B12893DA76E
  [SwitchA-pkey-key-code]EBC1D128D97F0678D7722B5341C8506F358214B16A2FAC4B3
  68950387811C7DA33021500C773218C
  [SwitchA-pkey-key-code]737EC8EE993B4F2DED30F48EDACE915F0281810082269009E
  14EC474BAF2932E69D3B1F18517AD95
  [SwitchA-pkey-key-code]94184CCDFCEAE96EC4D5EF93133E84B47093C52B20CD35D02
  492B3959EC6499625BC4FA5082E22C5
  [SwitchA-pkey-key-code]B374E16DD00132CE71B020217091AC717B612391C76C1FB2E
  88317C1BD8171D41ECB83E210C03CC9
  [SwitchA-pkey-key-code]B32E810561C21621C73D6DAAC028F4B1585DA7F42519718CC
  9B09EEF0381840002818000AF995917
  [SwitchA-pkey-key-code]E1E570A3F6B1C2411948B3B4FFA256699B3BF871221CC9C5D
  F257523777D033BEE77FC378145F2AD
  [SwitchA-pkey-key-code]D716D7DB9FCABB4ADBF6FB4FDB0CA25C761B308EF53009F71
  01F7C62621216D5A572C379A32AC290
  [SwitchA-pkey-key-code]E55B394A217DA38B65B77F0185C8DB8095522D1EF044B465E
  8716261214A5A3B493E866991113B2D
  [SwitchA-pkey-key-code]485348
  [SwitchA-pkey-key-code] public-key-code end
  [SwitchA-pkey-public-key] peer-public-key end
  

  # Specify the host public key for the Stelnet server .192.168.1.40 as key1.

  [SwitchA] ssh client authentication server 192.168.1.40 assign publickey key1
  [SwitchA] quit
  

  # Establish an SSH connection to the Stelnet server 192.168.1.40.

  <SwitchA> ssh2 192.168.1.40
  Username: client001
  Trying 192.168.1.40
  Press CTRL+K to abort
  Connected to 192.168.1.40...
  Enter password: 
  

  After you enter the correct password, you can log in to Switch B successfully.