H3C switch configuration SSH password verification login method

I, background 1. Since the PC serial port does not support hot-swapping, please insert the serial port or pull out the PC without the power of the switch. When connecting the PC and switches, first install the DB-9 end to the PC of the cable, then connect the RJ-45 to the switch; when removing, pull out the RJ-45 end, then unplug the DB-9 side. 2. Restore the extension of the factory setting "H3c" resetsaved-configuration 3, restart the equipment Must be rebooted to take effect Second, VLAN configuration 1, delete VLAN System mode: undovlani 2, create a VLAN [H3c] VLAN100 3, add the port to the VLAN [H3C-VLAN100] PortgigabitEthernet1 / 0 / 1TogigabitEthernet1 / 0/16 4. Create a VLAN 200, VLAN300, add port to VALN separately. [H3C-VLAN200] PortgigabitEthernet1 / 0 / 17togigabitEthernet1 / 0/32 [H3C-VLAN300] PortgigabitEthernet1 / 0 / 33togigabitEthernet1 / 0/44 Note: The default port is in VLAN1, which remains in VLAN1. 5, configure the management address to the VLAN [H3c] interfacevlan-interface100 [H3c-vlan-interface100] ipaddress192.168.5.189255.255.255.0 Third, open SSH management System configuration mode: View SSH status information: [H3C] DisplaysshServerstatus If it is sshserver: disable, then you need to turn on the SSH service: [H3c] SSHSERVERENABLE Fourth, create SSH use and give privileges Note: Establish different users, the level is different, Level3 is the highest authority, 0 is the lowest authority 1. When the user uses the SSH logon switch, the switch uses a password to authenticate it to the user to log in, generate RSA and DSA key pairs. [H3c] public-keylocalcreatersa [H3c] public-keylocalcreatedsa Notice: (1) Although a client only uses one of the DSA and RSA public key algorithms to authenticate the server, because the public key algorithms supported by different clients are different, to ensure that the client can successfully log in to the server, it is recommended to be on the server. The two key pairs of DSA and RSA are generated. (2) If it is created, the switch still exists after the switch is restarted. 2. Set the authentication mode on the user interface to AAA and let the user interface support the SSH protocol [H3c] user-interfacevty04 [H3C-UI-VTY0-4] Authentication-modescheme Notice: If the protocol that is configured on the user interface is SSH, in order to ensure successful login, be sure to configure the authentication-modescheme (using AAA authentication). [H3C-UI-VTY0-4] Protocolinboundssh 3, create users System configuration mode: [H3c] local-usercdc_admin 4, create a password [H3C-LUSER-CDC_ADMIN] PasswordCipher Password // Forgot your password, you can connect by the Console port, then change your password through this command. 5, define login protocols [H3c-luser-cdc_admin] Service-Typessh 6. Create user level [H3c-luser-cdc_admin] Authorization-Attributevel3 7. Configure the service type of the SSH user client001 to Stelnet, the authentication method is Password authentication. [H3c] sshusercdc_adminService-typeStelnetAuthentication-typepassword 8, backup configuration information Backup configuration information prevents loss after restarting, read the full text