Huawei AP 3010 SSH Configuration

Huawei SSH Configuration

1. Configure the local RSA key

[Huawei]rsa Local-key-pair Create

The key name is Be:host

% RSA keys defined for Host already exist.

Confirm to replace them? (y/n) [N]:y

The range of public key size is (512 ~ 2048).

Notes:if the key modulus is greater than 512,

It'll take a few minutes.

Input the bits in the Modulus[default = 2048]:512

Generating keys ...

...++++++++++++

.. ++++++++++++

......................++++++++

.......++++++++

2. Set Vty user can only use SSH mode

[Huawei]user-interface vty 0 4

[Huawei-ui-vty0-4]authentication-mode AAA

[Huawei-ui-vty0-4]protocol Inbound SSH

3. Create AAA user and password

[Huawei]aaa #进入aaa

[huawei-aaa]local-user admin password cipher 123456 #创建用户名和密码

[Huawei-aaa]local-user admin Privilege Level 3 #设置权限

4. Configure the authentication method for SSH users

[huawei]ssh user admin Authentication-type Password

5. Turn on Stelnet

[Huawei]stelnet Server Enable

Huawei AP 3010 SSH Configuration