1-6The SSH server needs to cooperate with an SSH client to complete the interactions between them. ForSSH client configuration, refer to Configuring the SSH Client.Configuring the User Interfaces for SSH ClientsAn SSH client accesses the device through a VTY user interface. Therefore, you need to configure theuser interfaces for SSH clients to allow SSH login. Note that the configuration takes effect at the nextlogin.Table 1-3 Follow these steps to configure the user interface for SSH clients:To do... Use the command... RemarksEnter system view system-view —Enter user interface view ofone or more user interfacesuser-interface vty first-number[ last-number ] —Configure theauthentication mode asschemeauthentication-mode scheme[ command-authorization ]RequiredBy default, the user interfaceauthentication mode ispassword.Specify the supportedprotocol(s)protocol inbound { all |ssh |telnet }OptionalBy default, both Telnet andSSH are supported.z If you have configured a user interface to support SSH protocol, you must configure AAAauthentication for the user interface by using the authentication-mode scheme command toensure successful login.z On a user interface, if the authentication-mode password or authentication-mode nonecommand has been executed, the protocol inbound ssh command is not available. Similarly, ifthe protocol inbound ssh command has been executed, the authentication-mode passwordand authentication-mode none commands are not available.Configuring the SSH Management FunctionsThe SSH server provides a number of management functions. Some functions can prevent illegaloperations such as malicious password guess, further guaranteeing the security of SSH connections.Some other functions allow you to specify the source IP address or interface for the SSH server toprovide SSH access services for clients, increasing the service manageability.
