Operation Manual – SSHH3C S3100-52P Ethernet Switch Chapter 1 SSH Configuration1-501.7.7 When Switch Acts as Client and First-Time Authentication is notSupportedI. Network requirementsAs shown in Figure 1-31, establish an SSH connection between Switch A (SSH Client)and Switch B (SSH Server) for secure data exchange. The user name is client001 andthe SSH server’s IP address is 10.165.87.136. The publickey authentication mode isused to enhance security.II. Network diagramFigure 1-31 Switch acts as client and first-time authentication is not supportedIII. Configuration procedurez Configure Switch B# Create a VLAN interface on the switch and assign an IP address for it to serve as thedestination of the client. system-view[SwitchB] interface vlan-interface 1[SwitchB-Vlan-interface1] ip address 10.165.87.136 255.255.255.0[SwitchB-Vlan-interface1] quitNote:Generating the RSA and DSA key pairs on the server is prerequisite to SSH login.# Generate RSA and DSA key pairs.[SwitchB] public-key local create rsa[SwitchB] public-key local create dsa# Set AAA authentication on user interfaces.[SwitchB] user-interface vty 0 4[SwitchB-ui-vty0-4] authentication-mode scheme# Configure the user interfaces to support SSH.[SwitchB-ui-vty0-4] protocol inbound ssh# Set the user command privilege level to 3.
