Operation Manual – SSHH3C S5600 Series Ethernet Switches Chapter 1 SSH Configuration1-33[Switch] interface vlan-interface 2[Switch-Vlan-interface2] ip address 192.168.1.70 255.255.255.0[Switch-Vlan-interface2] quitCaution:Generating the RSA and DSA key pairs on the server is prerequisite to SSH login.# Generate RSA and DSA key pairs.[Switch] public-key local create rsa[Switch] public-key local create dsa# Set the authentication mode for the user interfaces to AAA.[Switch] user-interface vty 0 4[Switch-ui-vty0-4] authentication-mode scheme# Enable the user interfaces to support SSH.[Switch-ui-vty0-4] protocol inbound ssh[Switch-ui-vty0-4] quit# Configure the RADIUS scheme.[Switch] radius scheme rad[Switch-radius-rad] accounting optional[Switch-radius-rad] primary authentication 10.1.1.1 1812[Switch-radius-rad] key authentication expert[Switch-radius-rad] server-type extended[Switch-radius-rad] user-name-format without-domain[Switch-radius-rad] quit# Apply the scheme to the ISP domain.[Switch] domain bbb[Switch-isp-bbb] scheme radius-scheme rad[Switch-isp-bbb] quit# Configure an SSH user, specifying the switch to perform password authentication forthe user.[Switch] ssh user hello authentication-type password3) Configure the SSH client# Configure an IP address (192.168.1.1 in this case) for the SSH client. This IP addressand that of the VLAN interface on the switch must be in the same network segment.# Configure the SSH client software to establish a connection to the SSH server. TakeSSH client software Putty Version 0.58 as an example:
