1-29Under Protocol options, select 2 from Preferred SSH protocol version. Then, click Open. If theconnection is normal, you will be prompted to enter the user name hello and the password. Onceauthentication succeeds, you will log in to the server. The level of commands that you can access afterlogin is authorized by the CAMS server. You can specify the level by setting the EXEC Privilege Levelargument in the Add Account window shown in Figure 1-15.When Switch Acts as Server for Password and HWTACACS AuthenticationNetwork requirementsAs shown in Figure 1-18, an SSH connection is required between the host (SSH client) and the switch(SSH server) for secure data exchange. Password authentication is required.z The host runs SSH2.0 client software to establish a local connection with the switch.z The switch cooperates with an HWTACACS server to authenticate SSH users.Network diagramFigure 1-18 Switch acts as server for password and HWTACACS authenticationConfiguration procedurez Configure the SSH server# Create a VLAN interface on the switch and assign it an IP address. This address will be used as the IPaddress of the SSH server for SSH connections. system-view[Switch] interface vlan-interface 2[Switch-Vlan-interface2] ip address 192.168.1.70 255.255.255.0[Switch-Vlan-interface2] quitGenerating the RSA and DSA key pairs on the server is prerequisite to SSH login.# Generate RSA and DSA key pairs.[Switch] public-key local create rsa[Switch] public-key local create dsa
