Configuration Guide Configuring SSH
1 vty 0 --- idle 00:08:02 192.168.23.83
2 vty 1 --- idle 00:00:58 192.168.23.121
 Configuring AAA Authentication of SSH Users
SSH users can use the AAA authentication mode for user authentication, as shown in Figure 14-16. To
ensure security of data exchange, the PC functions as the SSH client, and uses the SSH protocol to log in to
the network device where the SSH server is enabled. To better perform security management, the AAA
authentication mode is used on the user login interface of the SSH client. Two authentication methods,
including Radius server authentication and local authentication, are provided in the AAA authentication
method list to ensure reliability. The Radius server authentication method is preferred. If the Radius server
does not respond, select the local authentication method.
 The route from the SSH client to the SSH server is reachable, and the route from the SSH server to the
Radius server is also reachable.
 Configure the SSH server on the network device. The configuration method is already described in the
previous example, and therefore omitted here.
 Configure the AAA parameters on the network device. When the AAA authentication mode is used,
method lists are created to define the identity authentication and types, and applied to a specified
service or interface.
Ruijie(config)# enable service ssh-server
Ruijie(config)#crypto key generate rsa
% You already have RSA keys.
% Do you really want to replace them? [yes/no]:
Choose the size of the key modulus in the range of 360 to 2048 for your
Signature Keys. Choosing a key modulus greater than 512 may take
To Next Page
Loading...
Need help?
General
