cisco路由器SSH登陆高级配置

cisco路由器SSH登陆高级配置

enable www.2cto.com

configure terminal

enable secret cisco

service password-encryption 启用密码加密服务

aaa new-model

aaa authentication login AAA_LOCAL local

username sunchao secret cicso

username cocoe secret cisco

security passwords min-length 5 配置密码最小长度

hostname R1

ip domain-name sunchao.com

crypto key generate rsa

access-list 10 remark Hosts allowed to SSH

access-list 10 permit host 192.168.1.1

access-list 10 permit host 192.168.1.2

www.2cto.com

R2(config)#line vty 0 4

R2(config-line)#logging synchronous

R2(config-line)#exec-timeout 5 30

R2(config-line)#login authentication AAA_LOCAL

R2(config-line)#transport input ssh

R2(config-line)#access-class 10 in

R2(config-line)#end

ip ssh version 2

ip ssh timeout 30 （设置最大空闲定时器）

ip ssh authentication-retries 2 （最大失败尝试次数）

R1登陆

R1#ssh -l sunchao 192.168.1.1

Open

Password: