Password authentication enabled Stelnet server configuration example

As shown in Figure 152:

• The router acts as the Stelnet server and uses password authentication.

• The username and password of the client are saved on the router.

Establish an Stelnet connection between the host and the router, so you can log in to the router as a network administrator to configure and manage the router.

1. Configure the Stelnet server:

   # Generate RSA key pairs.

   <Router> system-view
   [Router] public-key local create rsa
   The range of public key modulus is (512 ~ 2048).
   If the key modulus is greater than 512, it will take a few minutes.
   Press CTRL+C to abort.
   Input the modulus length [default = 1024]:
   Generating Keys...
   ........................++++++
   ...................++++++
   ..++++++++
   ............++++++++
   Create the key pair successfully.
   

   # Generate a DSA key pair.

   [Router] public-key local create dsa
   The range of public key modulus is (512 ~ 2048).
   If the key modulus is greater than 512, it will take a few minutes.
   Press CTRL+C to abort.
   Input the modulus length [default = 1024]:
   Generating Keys...
   .++++++++++++++++++++++++++++++++++++++++++++++++++*
   ........+......+.....+......................................+
   ...+.................+..........+...+.
   Create the key pair successfully.
   

   # Generate an ECDSA key pair.

   [Router] public-key local create ecdsa secp256r1
   Generating Keys...
   .
   Create the key pair successfully.
   

   # Enable the Stelnet server.

   [Router] ssh server enable
   

   # Assign an IP address to interface GigabitEthernet 1/0/1. The Stelnet client uses this IP address as the destination for SSH connection.

   [Router] interface gigabitethernet 1/0/1
   [Router-GigabitEthernet1/0/1] ip address 192.168.1.40 255.255.255.0
   [Router-GigabitEthernet1/0/1] quit
   

   # Set the authentication mode to AAA for the user lines.

   [Router] line vty 0 63
   [Router-line-vty0-63] authentication-mode scheme
   [Router-line-vty0-63] quit
   

   # Create a local device management user named client001.

   [Router] local-user client001 class manage
   

   # Set the password to aabbcc in plain text for local user client001.

   [Router-luser-manage-client001] password simple aabbcc
   

   # Authorize local user client001 to use the SSH service.

   [Router-luser-manage-client001] service-type ssh
   

   # Assign the network-admin user role to local user client001.

   [Router-luser-manage-client001] authorization-attribute user-role network-admin
   [Router-luser-manage-client001] quit
   

   # Create an SSH user named client001. Specify the service type as stelnet and the authentication method as password for the user.

   [Router] ssh user client001 service-type stelnet authentication-type password
   

2. Establish a connection to the Stelnet server:

   There are different types of Stelnet client software, such as PuTTY and OpenSSH. This example uses an Stelnet client that runs PuTTY version 0.58.

   To establish a connection to the Stelnet server:

   1. Launch PuTTY.exe to enter the interface shown in Figure 153.

   2. In the Host Name (or IP address) field, enter the IP address 192.168.1.40 of the Stelnet server.

      Figure 148: Specifying the host name (or IP address)

1. Click Open to connect to the server.

If the connection is successfully established, the system notifies you to enter the username and password. After entering the username (client001) and password (aabbcc), you can enter the CLI of the server.