因为telnet缺少安全的认证方式 在传输过程中采用tcp明文传输 存在安全隐患。所以出现了stelnet（secure telnet的简称）可以在一个传统不安全的网络中 server通过对client的认证和双向数据加密，为网络提供安全的telnet服务
实验：用路由器r1模拟pc 作为client。路由器r2作为server。模拟r1远程登陆r2.通过password认证来实现
<Huawei>
May 6 2018 12:36:00-08:00 Huawei %IFPDT/4/IF_STATE(l)[0]:Interface GigabitEt
hernet0/0/0 has turned into UP state.
<Huawei>sy
Enter system view, return user view with Ctrl Z.
[Huawei]sysname server 修改设备名称
[server]rsa loc
[server]rsa local-key-pair c
[server]rsa local-key-pair create 生成rsa主机密钥
The key name will be: Host
% RSA keys defined for Host already exist.
Confirm to replace them? (y/n)[n]:y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 512]:y
% Invalid number, the range is (512 ~ 2048).
[server]ste
[server]stelnet serv
[server]stelnet server en
[server]stelnet server enable ssh设备默认是关闭的所以需要开启
Info: Succeeded in starting the STELNET server.
[server]user
[server]user-group
[server]user-interface vty 0 4 进入接口
[server-ui-vty0-4]auth
[server-ui-vty0-4]authentication-mode aaa
[server-ui-vty0-4]pro
[server-ui-vty0-4]protocol in
[server-ui-vty0-4]protocol inbound ssh 设置使用ssh 默认关闭telnet
[server-ui-vty0-4]q
[server]aaa
[server-aaa]loc
[server-aaa]local-user admin pass
[server-aaa]local-user admin password cip
[server-aaa]local-user admin password cipher hello
[server-aaa]local-user admin password cipher hello pri
[server-aaa]local-user admin password cipher hello privilege lev
[server-aaa]local-user admin password cipher hello privilege level 3 设置用户名 密码 级别
[server-aaa]loc
[server-aaa]local-user admin ser
[server-aaa]local-user admin service-type ssh 将aaa下的模式设置为ssh
[server-aaa]q
[server]ssh user admin auth
[server]ssh user admin authentication-type pass
[server]ssh user admin authentication-type password 设置用户验证方式为password
Authentication type setted, and will be in effect next time
[server]int g0/0/0
[server-GigabitEthernet0/0/0]ip add 10.1.1.254 24
[server-GigabitEthernet0/0/0]
May 6 2018 12:38:42-08:00 server %IFNET/4/LINK_STATE(l)[1]:The line protocol
IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[server-GigabitEthernet0/0/0]q
[server]
[server]
May 6 2018 12:43:50-08:00 server %IFPDT/4/IF_STATE(l)[5]:Interface GigabitEt
hernet0/0/0 has turned into DOWN state.
[server]
r1配置：<Huawei>sy
Enter system view, return user view with Ctrl Z.
[Huawei]sysname client
[client]ssh client fi
[client]ssh client first-time en
[client]ssh client first-time enable 开启ssh用户认证
[client]int g0/0/0
[client-GigabitEthernet0/0/0]ip add 10.1.1.1 24
May 6 2018 12:39:36-08:00 client %IFNET/4/LINK_STATE(l)[0]:The line protocol
IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[client-GigabitEthernet0/0/0]q
配置完成后进行验证 在r1上stelnet 10.1.1.254
[Huawei]sysname client
[client]ste
[client]stelnet 10.1.1.254
Please input the username:admin
Trying 10.1.1.254 ...
Press CTRL K to abort
Connected to 10.1.1.254 ...
Enter password:
-----------------------------------------------------------------------------
User last login information:
-----------------------------------------------------------------------------
Access Type: SSH
IP-Address : 10.1.1.1 ssh
Time : 2018-05-06 13:07:21-08:00
-----------------------------------------------------------------------------
<server>sy
Enter system view, return user view with Ctrl Z.
[server]
,
