How to configure SSH management for Ruijie Switches in CLI?
1. Application Scenario & Requirement:Enabling SSH on the switch allows a host to remotely access the CLI for device management.
2. Network Topology:
data/attachment/forum/202308/15/105129ddmyimz17iiiz1i7.png
3. Configuration Key Points:
a. Enable SSH service.
b. Generate cryptographic key
c. Configure a management IP address for the device. If the PC and the switch are not in the same network segment, you need to configure a default gateway for the switch.
4. Configuration Steps:
a. Enable SSH service on the switch:
Ruijie#configure terminal
Ruijie(config)#enable service ssh-server
b. Generate cryptographic key:
Ruijie(config)#crypto key generate dsa
Choose the size of the key modulus in the range of 360 to 2048 for your Signature Keys. Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus : ------> may press 'Enter' directly
% Generating 512 bit DSA keys ...
c. Configure the management IP address and SSH login credentials:
Ruijie(config)#interface vlan 1
Ruijie(config-if)#ip address 192.168.1.1 255.255.255.0
Option 1. Using password only when accessing switch CLI through SSH:
Ruijie(config)#line vty 0 4 ------> enter vty configuration mode, 0 4 means that a total of 5 users are allowed to log in to the switch through telnet at the same time
Ruijie(config-line)#login ------> enable password protection of the line
Ruijie(config-line)#password ruijie ------> set SSH password as 'ruijie'
Ruijie(config-line)#exit
Ruijie(config)#enable password ruijie ------> set the password to enter privilege mode as 'ruijie'
Ruijie(config)#end
Ruijie#write
Option 2. Using username and password when accessing switch CLI through SSH:
Ruijie(config)#line vty 0 4
Ruijie(config-line)#login local ------> Use local password and password for Telnet connection
Ruijie(config-line)#exit
Ruijie(config)#username admin password ruijie ------> configure the remote management username as 'admin' and password as 'ruijie'
Ruijie(config)#enable password ruijie
Ruijie(config)#end
Ruijie#write
Note: By default, both SSH and Telnet will be enabled. If you need to limit users to remotely access the device CLI through SSH only, and Telnet connection is restricted, the configuration should be as follows:
Ruijie(config)#line vty 0 4
Ruijie(config-line)#transport input ssh
5. Verification:
a. Use SecureCRT or PuTTY to access the device CLI remotely via SSH:
data/attachment/forum/202308/15/105158pan4so5dz5anm95n.png
b. Enter the correct username and password when prompted; once successful, the user mode CLI will show up and you may type 'enable' to enter privileged mode:
data/attachment/forum/202308/15/105207a90wb0g0jfw0uuf9.png
c. Type 'show service' to check if SSH has been enabled:
data/attachment/forum/202308/15/105212iifyzo9qoma07jox.png
d. Type 'show ssh' to view the SSH connection:
data/attachment/forum/202308/15/105217zsmvhtgtvv0vvuu8.png
e. Type 'show users' to view the users currently accessing the CLI:
data/attachment/forum/202308/15/105223hntl4vgkeztn00nk.png
In the example above, there is 1 console connection and 1 SSH connection accessing the switch CLI from IP address 192.168.1.2
Pages:
[1]