ÖÐÎÄ
ÖÐÎÄ
Ðû²¼Ê±¼ä£º2023-03-24
µã»÷Á¿£º993DCNÊý¾ÝÖÐÐÄ×°±¸ÊÇûÓÐweb½çÃæ/²»Ö§³Öweb½çÃæµÇ¼£¨Ã»ÓÐwebµÇ¼·½·¨£© £»
ͳһ¶¼ÊÇcliÏÂÁîÐнçÃæ £¬ÈôÊdzö³§ÉèÖõÄÇéÐÎÏ £¬ÔòʹÓÃconsoleÏßÅþÁ¬×°±¸¾ÙÐÐÉèÖà £»
ºóÐø¿ÉÉèÖÃtelnet/sshÀ´¾ÙÐÐÄɹÜ×°±¸Ò»¡¢×éÍøÐèÇó
ͨ¹ýSSH¹¦Ð§Ô¶³Ì¹ÜÀí×°±¸¡£
¶þ¡¢×éÍøÍØÆË
Èý¡¢ÉèÖÃÒªµã
1¡¢ÐèÒª¿ªÆôSSH¹¦Ð§
2¡¢ÐèÒªÊÖ¹¤ÌìÉúKey
3¡¢ÈôÊÇPCÓë½»Á÷»ú²»ÔÚͳһ¸öÍø¶Î £¬ÐèÒªÉèÖý»Á÷»úµÄĬÈÏÍø¹Ø
ËÄ¡¢ÉèÖð취
1¡¢¿ªÆô½»Á÷»úµÄSSH·þÎñ¹¦Ð§
Ruijie#configure terminal
Ruijie(config)#enable service ssh-server
2¡¢ÌìÉú¼ÓÃÜÃÜÔ¿£º
Ruijie(config)#crypto key generate dsa ------>¼ÓÃÜ·½·¨ÓÐÁ½ÖÖ£ºDSAºÍRSA,¿ÉÒÔËæÒâÑ¡Ôñ
Choose the size of the key modulus in the range of 360 to 2048 for your
Signature Keys. Choosing a key modulus greater than 512 may take
a few minutes.
How many bits in the modulus [512]: ------>Ö±½ÓÇûسµ
% Generating 512 bit DSA keys ...[ok]
3¡¢ÉèÖý»Á÷»úµÄ¹ÜÀíIPµØÖ·
Ruijie(config)#interface vlan 1
Ruijie(config-if)# ip address 192.168.1.1 255.255.255.0
ÐèÇóÒ»£ºSSHʱ½öʹÓÃÃÜÂëµÇÈë½»Á÷»ú
Ruijie(config)#line vty 0 4 ------> ½øÈëSSHÃÜÂëÉèÖÃģʽ £¬0 4ÌåÏÖÔÊÐí¹²5¸öÓû§Í¬Ê±SSHµÇÈëµ½½»Á÷»ú
Ruijie(config-line)#login ------>ÆôÓÃÐèÊäÈëÃÜÂë²Å»ªSSHÀÖ³É
Ruijie(config-line)#password ruijie ------> ½«SSHÃÜÂëÉèÖÃΪruijie
Ruijie(config-line)#exit ------> »Øµ½È«¾ÖÉèÖÃģʽ
Ruijie(config)#enable password ruijie ------>ÉèÖýøÈëÌØȨģʽµÄÃÜÂëΪruijie
Ruijie(config)#end ------>Í˳öµ½ÌØȨģʽ
Ruijie#write ------>È·ÈÏÉèÖÃ׼ȷ £¬ÉúÑÄÉèÖÃ
×¢ÖØÊÂÏÈôÊÇÒªÏÞÖÆÓû§Ê¹ÓÃtelnetµÇ¼ £¬Ö»ÄÜʹÓÃSSHµÇ¼ £¬ÔòÐèÒªµ÷½âÉèÖà £¬Ä¬ÈÏÇéÐÎÏÂtelnetºÍSSH¾ù¿ÉµÇ¼¡£
Ruijie(config)#line vty 0 4
Ruijie(config-line)#transport input ssh
È·ÈÏÊÇ·ñÉèÖÃ׼ȷ
1)·¿ªSecureCRTÈí¼þ£¨ËµÃ÷£ºSSHµÇÈë½»Á÷»úÐèÒªÓÃÖ§³ÖSSH¿Í»§¶ËµÄÈí¼þ £¬windowsµÄCMDģʽ²»Ö§³ÖSSH £¬ÕâÀïʹÓÃSecureCRTÈí¼þ×÷ΪSSH¿Í»§¶Ë£© £¬Ñ¡ÔñÈçϺìɫȦÆðÀ´Í¼±ê£º
2)ÐÒéÑ¡ÔñSSH2 £¬Ö÷»úÃûÊäÈë½»Á÷»úIPµØÖ·
3)µã»÷ÅþÁ¬ £¬ÔÚÈçÏÂÑ¡Ïî¿òÑ¡Ôñ½ÓÊܲ¢ÉúÑÄ
4)·ºÆðÊäÈëÓû§Ãû½çÃæ £¬Ëæ±ãÊäÈëÒ»¸öÓû§Ãû £¬ÎÒÕâ±ßÊäÈëÁËxxx×÷ΪÓû§Ãû
5)·ºÆðÊäÈëÓû§ÃûºÍÃÜÂë½çÃæ £¬ÊäÈëÔ¶³ÌµÇÈëÃÜÂë
6)È·ÈϺó½øÈëÓû§Ä£Ê½ £¬¼´Ruijie>ģʽ
7)ÔÚRuijie>ģʽÏÂÊäÈëenableºó £¬ÌáÐÑÊäÈëÌØȨÃÜÂë £¬ÊäÈë׼ȷµÄÃÜÂëºó»Ø³µ £¬½øÈëÌØȨģʽ
ÐèÇó¶þ£ºSSHʱʹÓÃÓû§Ãû¼°ÃÜÂëµÇÈë½»Á÷»ú
Ruijie(config)#line vty 0 4 ------>½øÈëSSHÃÜÂëÉèÖÃģʽ £¬0 4ÌåÏÖÔÊÐí¹²5¸öÓû§Í¬Ê±SSHµÇÈëµ½½»Á÷»ú
Ruijie(config-line)#login local ------>ÆôÓÃSSHʱʹÓÃÍâµØÓû§ºÍÃÜÂ빦Ч
Ruijie(config-line)#exit ------>»Øµ½È«¾ÖÉèÖÃģʽ
Ruijie(config)#username admin password ruijie ------>ÉèÖÃÔ¶³ÌµÇÈëµÄÓû§ÃûΪadmin £¬ÃÜÂëΪruijie
Ruijie(config)#enable password ruijie ------>ÉèÖýøÈëÌØȨģʽµÄÃÜÂëΪruijie
Ruijie(config)#end ------>Í˳öµ½ÌØȨģʽ
Ruijie#write ------>È·ÈÏÉèÖÃ׼ȷ £¬ÉúÑÄÉèÖÃ
×¢ÖØÊÂÏÈôÊÇÒªÏÞÖÆÓû§Ê¹ÓÃtelnetµÇ¼ £¬Ö»ÄÜʹÓÃSSHµÇ¼ £¬ÔòÐèÒªµ÷½âÉèÖà £¬Ä¬ÈÏÇéÐÎÏÂtelnetºÍSSH¾ù¿ÉµÇ¼¡£
Ruijie(config)#line vty 0 4
Ruijie(config-line)#transport input ssh
×¢£ºÈôÊÇҪեȡËùÓÐÈËͨ¹ýÔ¶³ÌµÄ·½·¨À´µÇ¼½»Á÷»ú £¬ÔòÊäÈëÒÔÏÂÏÂÁ
Ruijie(config-line)#transport input none
È·ÈÏSSHÉèÖÃÊÇ·ñ׼ȷ
1)·¿ªSecureCRTÈí¼þ £¬Ñ¡ÔñÈçϺìɫȦÆðÀ´Í¼±ê£º
2)ÐÒéÑ¡ÔñSSH2 £¬Ö÷»úÃûÊäÈë½»Á÷»úIPµØÖ·
3)µã»÷ÅþÁ¬ £¬ÔÚÈçÏÂÑ¡Ïî¿òÑ¡Ôñ½ÓÊܲ¢ÉúÑÄ
4)·ºÆðÊäÈëÓû§Ãû½çÃæ £¬ÊäÈëÓû§Ãûadmin
5)·ºÆðÊäÈëÓû§ÃûºÍÃÜÂë½çÃæ £¬ÊäÈëÔ¶³ÌµÇÈëÃÜÂë
6)È·ÈϺó½øÈëÓû§Ä£Ê½ £¬¼´Ruijie>ģʽ
7)ÔÚRuijie>ģʽÏÂÊäÈëenableºó £¬ÌáÐÑÊäÈëÌØȨÃÜÂë £¬ÊäÈë׼ȷµÄÃÜÂëºó»Ø³µ £¬½øÈëÌØȨģʽ
Îå¡¢¹¦Ð§ÑéÖ¤
ÓÃshow serviceÏÂÁîÈ·ÈÏSSH·þÎñ¹¦Ð§ÊÇ·ñ¿ªÆô
show usersÉó²éÄ¿½ñµÇÈëµÄÓû§
¼ÌÐøÉèÖà telnetµÇ¼ÉèÖÃ
sshµÇ¼·½·¨
