網(wǎng)絡(luò)系統(tǒng)建設(shè)與運(yùn)維初級(jí) 5.6 STelnet登錄管理

信息都是明文方式傳送，包括遠(yuǎn)程登錄的用戶名和密碼，缺乏安全性。STeln這一安全協(xié)議，可避免Telnet登錄的安全隱患，提供在不安全的本案例中，管理員通過Console口搭建STelnet登錄環(huán)境，并進(jìn)行登錄測(cè)試。通過本項(xiàng)目可以掌握如下知識(shí)點(diǎn)和技能點(diǎn)。l掌握SSH用戶認(rèn)證方式為Password認(rèn)證的STl掌握SSH用戶認(rèn)證方式為RSA認(rèn)證的拓?fù)湔f明：1.組織教學(xué)實(shí)驗(yàn)時(shí)，本地維護(hù)終端可以跟遠(yuǎn)程維護(hù)終端是同一臺(tái)PC。本項(xiàng)目的主要任務(wù)是熟悉Telnet登錄操作并掌握Telnet環(huán)境搭建過程。步驟1準(zhǔn)備console線。步驟2配置設(shè)備名稱、IPv4編址。步驟3配置VTY用戶界面，包括用戶級(jí)別、認(rèn)證方式和支持SSH步驟4AAA視圖下創(chuàng)建用于STelnet步驟5使能Stelnet服務(wù)器，創(chuàng)建RSA本步驟6配置SSH用戶認(rèn)證方式為“password”認(rèn)證方式，步驟7配置SSH用戶認(rèn)證方式為“rsa”認(rèn)證方式，并測(cè)試登錄。登錄管理”，此處不再贅述）步驟2配置設(shè)備名稱為R1，配置接口G<Huawei>system-view<Huawei>system-view[Huawei]sysnameR1[R1]interfaceGigabitEthernet0/0/0[R1-GigabitEthernet0/0/0]ipaddress192.168.0.124[R1]user-interface[R1]user-interfacemaximum-vty15[R1-ui-vty0-14]authenti[R1-ui-vty0-14]protoc[R1-ui-vty0-14]protoc[R1-ui-vty0-14]userprivilegelevel3[R1-aaa]local-userhuawei01password[R1-aaa]local-userhuawei01privil[R1-aaa]local-userhuawei02password[R1-aaa]local-userhuawei[R1-aaa]local-userhuawei步驟5使能STelnet服務(wù)器，并創(chuàng)建RSAThekeynamewillb%RSAkeysdefinedforConfirmtoreplacethem?(yTherangeofpublickeysizeis(512~2048).NOTES:Ifthekeymodulusisgreaterthan512,Inputthebitsinthemodulus[defaulGeneratingkeys...[R1]displayrsalocal-key-[R1]displayrsalocal-key-============================================TimeofKeypaircreated:2020-05-0511:1Keytype:RSAencryptio============================================E11A43C68C4B0DF5236B115C4101551256EBDCE862CEB50052AB12FB6844FEF2237FEC7BD0E84AD350D0F2============================================TimeofKeypaircreated:2020-05-0511:1Keytype:RSAencryptio============================================B5FE13BDBAA84E09BB355BA0CA9FD405F22622144D70544ECAEE5424D1C2CB616974F50697E6540D40465060AB4D9ACDD5B步驟6配置SSH用戶“huawei01”認(rèn)證方式為“[R1]sshuserhuawei01authentication-ty[R1]sshuserhuawei01authentication-tyl執(zhí)行【displaysshserversession】查看SSH服務(wù)器與客戶端連接的會(huì)話信息。----------------------------------------------------------------------------------------------------------------------------------------------------------l執(zhí)行【displaysshuser-informationusername】查看指定SSH用戶的信息，其中“username”是上一步驟中觀察到的用戶名，本例中為“hua[R1]displaysshuser步驟7配置SSH用戶“huaw[R1]sshuserhuawei02authenticati[R1]sshuserhuawei02authenticati2）在遠(yuǎn)程維護(hù)終端運(yùn)行puttygen.exe。用于生成公用密鑰、私用如圖6所示，選取“RSA”，點(diǎn)擊“生成”，進(jìn)入密鑰生成狀態(tài)，此時(shí)私鑰”，在彈出的對(duì)話框中（如圖8選擇“是”，保存打開上一個(gè)程序所生成的SSH所需的公有密鑰文件public.pub，[R1]rsapeer-public[R1]rsapeer-public[R1-rsa-public-key]public[R1-rsa-key-code]30820108028201010098579C[R1-rsa-key-code]9248B7572294784FBB2DB50[R1-rsa-key-code]4D1F29ACBD84C6F28458ABED0CC8290F[R1-rsa-key-code]70CE7E496BBF[R1-rsa-key-code]B38749A5477AA9E699249201033C5[R1-rsa-key-code]BDE97641C05801490B96A[R1-rsa-key-code]D248188CC09B4[R1-rsa-key-code]B5F7DDB8058AA6CEF6254AEEE4E67D[R1-rsa-key-code]166FFC113DF8046AEFB077D8[R1-rsa-key-code]ADE61E69DB14C2D524D67[R1-rsa-key-code]public-ke[R1-rsa-public-key]peer-pub[R1]sshuserhuawei02assign[R1]sshuserhuawei02assignl執(zhí)行【displaysshserversession】查看SSH服務(wù)器與客戶端連接的會(huì)話信息。VerAuth-typel執(zhí)行【displaysshuser-informationusername】查看指定SSH用戶的信息，其中“username”[R1]displaycurren###superpasswordlevel3cipher%$%$:N>:G8oX"7n#e3##rsapeer-public-keyhua98579C66804A3D6827BCBF8724EFBCADC48E891EABCE6C46C7677F9248B7572294784FBB2DB50F629670BA0DA1DCF78C1F29ACBD84C6F28458ABED0CC93D7C91A96FB598D7B34E5BAAB981DA24BDE97641C05801490B96A644F6354DD48188CC09B4BC411BDC89CE42348A96567C5769F91C745B5F7DDB805254AEEE4E67D2D6439E28163B4D830166FFC113DF8046AEFB077D82A49EE8A281E33ADE61E69DB14C2D524D67#local-useradminpasswordcipher%$%$K8m.Nt84DZ}e#<0local-useradminservice-tylocal-userhuawei01passwordcipher%$%$~YIKVR]*c6}9F:/local-userhuawei01privilegelevelocal-userhuawei01service-tlocal-userhuawei02passwor