华为路由器/交换机上配置Stelnet远程登录

华为路由器/交换机上配置Stelnet远程登录

引用

CSDN

1.

https://m.blog.csdn.net/qq_53648776/article/details/143757142

Stelnet是一种基于SSH协议的加密远程登录协议，主要用于网络设备的安全管理。它通过加密的SSH通道，允许管理员安全地访问网络设备的命令行界面（CLI），进行配置、监控和管理。本文将详细介绍在华为路由器/交换机上配置Stelnet远程登录的具体步骤。

拓扑图如下所示：

配置步骤

1. 配置IP地址

首先需要为AR1和AR2路由器配置IP地址，作为远程登录的地址。

# AR1路由器配置
[AR1]int g0/0/0
[AR1-GigabitEthernet0/0/0]
[AR1-GigabitEthernet0/0/0]ip add 10.0.0.1 30

# AR2路由器配置
[AR2]int g0/0/0
[AR2-GigabitEthernet0/0/0]
[AR2-GigabitEthernet0/0/0]ip add 10.0.0.2 30

2. 开启Stelnet功能并创建本地账户

在AR1上开启Stelnet功能，创建一个本地账户，账号为user1，密码为Huawei@123。配置账户的服务类型为SSH，并进入虚拟终端接口视图配置认证模式为aaa。

[AR1]stelnet server enable
Info: Succeeded in starting the STELNET server.

[AR1]aaa
[AR1-aaa]local-user user1 password cipher Huawei@123
Info: Add a new user.

[AR1-aaa]local-user user1 service-type SSH
[AR1-aaa]user-interface vty 0 4
[AR1-ui-vty0-4]authentication-mode aaa
[AR1-ui-vty0-4]protocol inbound ssh

3. 配置AR2客户端

在AR2客户端上使能SSH客户端首次认证。当SSH客户端首次访问SSH服务器，而SSH客户端没有配置SSH服务器端的公钥时，用户可以选择使能SSH客户端首次认证继续访问该SSH服务器，并在SSH客户端保存该主机公钥。

[AR2]ssh client first-time enable
[AR2]stelnet 10.0.0.1
Please input the username:user1
Trying 10.0.0.1 ...
Press CTRL+K to abort
Connected to 10.0.0.1 ...
The server is not authenticated. Continue to access it? (y/n)[n]:y
Nov 14 2024 08:52:28-08:00 AR2 %%01SSH/4/CONTINUE_KEYEXCHANGE(l)[0]:The server h
ad not been authenticated in the process of exchanging keys. When deciding wheth
er to continue, the user chose Y. 

[AR2]
Save the server's public key? (y/n)[n]:y
The server's public key will be saved with the name 10.0.0.1. Please wait...
Nov 14 2024 08:52:36-08:00 AR2 %%01SSH/4/SAVE_PUBLICKEY(l)[1]:When deciding whet
her to save the server's public key 10.0.0.1, the user chose Y. 

[AR2]
Enter password:
<AR1>

通过以上步骤，就可以在AR2上成功通过Stelnet远程登录到AR1路由器。