system
rsa local-key-pair create
stelnet server enable
New Key from Linux ssh-keygen
system
rsa peer-public-key new
public-key-code begin
30820108 02820101 00E87D06 6DC75D34 21A1FA2F ACAEDEB4
8BDA74B2 99E7B3FD 5B4D52EF D013F53A 506988DC 970E2010
4D3D9EE8 AE63ABCE 369C56DF E4A31AC3 8EF49D4A EF33584A
6747A21E BCC99571 D4F211FF 66C63EB8 0D3D4AC0 A0A7BA0F
1A904FBC 6813DD49 1E5F4CC5 1F537F12 8085640B 47BBF8B9
C3179E19 06C64FBF 2627E273 D080B15B 1DC59FE1 35784F64
7EB9DF40 A2E60266 0175F0EA 3F21417F E7AA67FB 674C8F58
3AF84D02 C2519C41 DFFCBA00 2D44105B 61D5F900 4EE59116
03590137 C0AD2AC4 CA582FF7 E80AB74A BDD00141 235C1257
0D65F77D ED199235 16760636 3E04ADE4 081E7A29 EBC35A00
41D5413D D475DC9F 4BBC6AD4 ACCD8511 AE49A5AB A1E7BCA1
4F020123
public-key-code end
peer-public-key end
配置ssh用戶
ssh user admin
ssh user admin authentication-type rsa
ssh user admin assign rsa-key new
ssh user admin service-type stelnet
如果沒有使用ssh user命令配置相應的SSH用戶，則可以直接執行
ssh authentication-type default password命令爲用戶配置SSH認證缺省採用密碼認證，在用戶數量比較多時，對用戶使用缺省密碼認證方式可以簡化配置，此時只需再配置AAA用戶即可。
user-interface con 0
set authentication password cipher switch@west263
aaa
local-user admin service-type ssh
user-interface vty 0 4
protocol inbound ssh
user-interface vty 16 20
authentication-mode aaa
protocol inbound ssh
quit
set save-configuration
set save-configuration backup-to-server server 61.139.126.34 transport-type ftp user westserver password bingft22p2Fsr3F path switch/ZZIDC/
set save-configuration interval 21600 delay 10
quit
save
y
添加自動備份到目標服務器
set save-configuration
set save-configuration backup-to-server server 61.139.126.34 transport-type ftp user username password ***** path switch/GDIDC/
set save-configuration interval 21600 delay 10
V200R001的補丁如果是SPH06的話需要更新補丁到最新,Username 和Password需要在後臺查
sys
undo acl 2002
acl number 2002
rule 5 permit source 125.65.114.15 0
rule 10 permit source 211.149.239.32 0
rule 15 permit source 118.123.255.127 31
rule 20 permit source 118.114.245.37 0
rule 500 deny
以前的公鑰，已經停用
system
rsa peer-public-key admin
public-key-code begin
3082010A 02820101 00BBC903 5170B649 75B172D8 1BB517B5
4637D04D C4F2CA72 3B4F04E0 F095E96E 979262CF EE971AE1
112BF859 3CC53104 B0353319 12CF41EE FA70C847 55DE9819
94642597 0D04A3AD 89F6D215 2FA4AFF0 47BE0B9A 4D0E4938