H3C Technologies H3C SecPath F1000-E - Manual (Page 37)

29
Step Command Remarks
1. Enter system view. system-view N/A
2. Create local key pair(s). public-key local create { dsa | rsa }
By default, no local key pair(s) are
created.
3. Enable SSH server. ssh server enable By default, SSH server is disabled.
4. Exit to system view. quit N/A
5. Enter one or more VTY user
interface views. user-interface vty first-number
[ last-number ]
N/A
6. Specify the scheme
authentication mode.
authentication-mode scheme
By default, authentication mode for
VTY user interfaces is password.
7. Enable the current user
interface to support either
Telnet, SSH, or both of them.
protocol inbound { all | ssh }
Optional.
By default, both protocols are
supported.
8. Enable command
authorization.
command authorization
Optional.
By default, command authorization
is not enabled.
By default, command level for a
login user depends on the user
privilege level. The user is
authorized the command with the
default level not higher than the
user privilege level. With the
command authorization
configured, the command level for
a login user is determined by both
the user privilege level and AAA
authorization. If a user executes a
command of the corresponding
command level, the authorization
server checks whether the
command is authorized. If yes, the
command can be executed.