Configure Remote Login via SSH
Configuration Condition
None
Enable the SSH Service of the Device
After the SSH server of a device is enabled, the device accepts the connection request initiated by the user from the SSHv1 or SSHv2 client. After the client passes the authentication, the client can access the device. After the SSH service of the device is enabled, the SSH service port 22 is monitored. If the ip ssh server command is used without parameter sshv1-compatible, it indicates that an SSH client can log in only through SSHv2.
Table 2-4 Enabling the SSH Service of the Device
|
Step
|
Command
|
Description
|
|
Enter the global configuration mode.
|
config terminal
|
-
|
|
Enable the SSH service of the device.
|
ip ssh server [ listen-port ][ sshv1-compatible ] [ listen-port ]
|
Mandatory.
By default, the SSH service is disabled.
|
Take the Device as an SSH Client for Remote Login
The device acts as an SSH client to log in to the specified SSH server remotely through the SSHv1 or SSHv2 protocol. During the login, a user name and a password are required for authentication from the SSH server.
Table 2-5 Taking an SSH Client for Remote Login
|
Step
|
Command
|
Description
|
|
Take the device as an SSH client for remote login.
|
ssh [ vrf vrf-name ] version { 1 | 2 } remote-host port-number[ source-interface interface-name ] user auth-method 1 password
|
Mandatory.
|
-
The SSH client can log in to a remote device only when the SSH service of the remote device is enabled, and the network between the SSH client and the remote device is normal.
Take the Device as an SFTP Client to Access SFTP Server
The device acts as an SFTP client to log in to the specified SFTP server remotely through the SSHv2 protocol. During the login, a user name and a password are required for authentication from the SFTP server. After the SFTP client is connected to the SFTP server, download or upload the files on the server.
Table 2-6 Taking the Device as SFTP Client to Access the SFTP Server
|
Step
|
Command
|
Description
|
|
Take the device as the SFTP client to access the SFTP server.
|
sftp {get | put} [ vrf vrf-name ] remote-host port-number [ source-interface interface-name ] user password src-filename dst-filename [compress]
|
Mandatory
|
-
The SFTP client can log in to a remote device only when the SSH service of the remote device is enabled, and the network between the SFTP client and the remote device is normal.
Switch
.png){kind=icon}
.png){kind=logo}
.jpg)
.png){kind=logo}
