華爲交換機配置ssh rsa認證登陸方式

system

rsa local-key-pair create

stelnet server enable

輸入公鑰

* * *

New Key from Linux ssh-keygen

```

system

rsa peer-public-key new

public-key-code begin

public-key-code end

peer-public-key end

```

配置ssh用戶 

```

ssh user admin

ssh user admin authentication-type rsa

ssh user admin assign rsa-key new

ssh user admin service-type stelnet

```

若是沒有使用ssh user命令配置相應的SSH用戶，則能夠直接執行

`ssh authentication-type default password`命令爲用戶配置SSH認證缺省採用密碼認證，在用戶數量比較多時，對用戶使用缺省密碼認證方式能夠簡化配置，此時只需再配置AAA用戶便可。

* * *

```

user-interface con 0

set authentication password cipher sXXXXXX

aaa

local-user admin service-type ssh 

user-interface vty 0 4

protocol inbound ssh

user-interface vty 16 20

authentication-mode aaa

protocol inbound ssh