华为路由器 Telnet 和 SSH 配置 - 认证

网络工程 路由器 华为
2022-02-12 20:12:50

我正在按照华为用户指南启用远程登录服务器和远程登录服务到端口。但是,每当我尝试远程登录时,我都会看到此错误并且连接超时 -

HUAWEI %%01SOCKET/4/TCP_AUTH_FAILED(s)[45]:TCP authentication failed.  (AuthenticationType=KeyChain, Cause=no local digest, SourceAddress=21.13.30.147, SourcePort=22, ForeignAddress=10.42.87.97, ForeignPort=45387, Protocol=Unknow Protocol, VpnInstanceName=)

我不知道我在这里想念什么。如何解决这个问题?

该路由器与普通交换机连接,我正在尝试通过我的 PC 访问它。我可以访问接口 IP - 21.13.30.147 但我不能 telnet 或 ssh。

这是我为 aaa 展示的

[HUAWEI-aaa]display this
#
aaa
 local-user root password cipher $1a$$z[[J^af*7$D/giK-@j'9.qB"9$$p>!<k>*Yd.IE,{Dnv(.tbDG$
 local-user root service-type terminal telnet ssh
 local-user root level 15
 local-user root state active
 local-user root access-limit 48
 authentication-scheme default0
 authentication-scheme default1
 authentication-scheme default
  authentication-mode local radius
 authentication-scheme l-h
  authentication-mode local
 authentication-scheme telnetcheck
  authentication-mode local
 #
 authorization-scheme default
 #
 accounting-scheme default0
 accounting-scheme default1
 accounting-scheme default
 #
 domain default_admin
  accounting-scheme default0
 domain default_8021x                     
  accounting-scheme default0
 #
#
return
[HUAWEI-aaa]

这是详细信息

<HUAWEI>display version 
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.160 (ATN 910I DC V200R005C00SPC100)
Copyright (C) 2013-2014 Huawei Technologies Co., Ltd.
HUAWEI ATN 910I DC uptime is 0 day, 13 hours, 17 minutes
ATN 910I DC version information:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
CXP version information:

CXP(Master) 2  : uptime is 0 day, 13 hours, 17 minutes
         StartupTime   2017/05/24   23:37:47 
  SDRAM Memory Size   : 512M bytes
  FLASH Memory Size   : 128M bytes
  CFCARD Memory Size : 122M bytes 
  CXP version information
  PCB         Version : 910I DC REV B
  FPGA1       Version : V220
  CPLD1       Version : V200
  PE          Version : 000
  BootROM     Version : 8.60.69
  BootLoad    Version : 9.60.69
  Software    Version : Version 5.160 RELEASE 0001
<HUAWEI>

这是其他配置

[HUAWEI]display this
#
sysname HUAWEI
#
vlan batch 100
#
undo telnet ipv6 server enable
#
radius enable
#
energy conservation disable
#
over-temperature protection enable
#
lldp enable
#
ip route-static 10.0.0.0 255.255.0.0 NULL0
ip route-static 10.0.0.0 255.255.0.0 GigabitEthernet0/2/5
ip route-static 10.0.0.0 255.255.255.0 LoopBack0
ip route-static 10.12.0.0 255.255.0.0 11.213.60.1
ip route-static 10.16.0.0 255.255.0.0 11.213.60.1
ip route-static 11.213.0.0 255.255.0.0 11.213.60.1
#
undo ssh server compatible-ssh1x enable
stelnet server enable
ssh user root                             
ssh user root authentication-type password
ssh user root service-type stelnet
#
lldp enable-dcn authentication %#%#H=9zRo)P=5!)wNK={pB4MHFo"(c#3VxQ7GL"k<bD%#%#
#
return

这里的身份验证问题是什么。我在 vty 0 -14 上使用 aaa 身份验证。

0个回答
没有发现任何回复~