cisco路由器SSH登陆高级配置

cisco路由器SSH登陆高级配置

enable www.ttep.cn
configure terminal
enable secret cisco
service password-encryption 启用密码加密服务
aaa new-model
aaa authentication login AAA_LOCAL local
username sunchao secret cicso
username cocoe secret cisco
security passwords min-length 5 配置密码最小长度
hostname R1
ip domain-name sunchao---
crypto key generate rsa

access-list 10 remark Hosts allowed to SSH
access-list 10 permit host 192.168.1.1
access-list 10 permit host 192.168.1.2
www.ttep.cn
R2(config)#line vty 0 4
R2(config-line)#logging synchronous
R2(config-line)#exec-timeout 5 30
R2(config-line)#login authentication AAA_LOCAL
R2(config-line)#transport input ssh
R2(config-line)#access-class 10 in
R2(config-line)#end
ip ssh version 2
ip ssh timeout 30 （设置最大空闲定时器）
ip ssh authentication-retries 2 （最大失败尝试次数）

R1登陆
R1#ssh -l sunchao 192.168.1.1
Open
Password: