Lab SSH Cisco

r1(config)#enable secret cisco
r1(config)#username cisco secret cisco
r1(config)#ip domain-name cisco.com       //定义域名,配置SSH必需
r1(config)#crypto key generate rsa modulus 2048    //生成密钥

r1(config)#access-list 90 permit 12.1.1.2
r1(config)#line vty 0 4  
r1(config-line)#login local 
r1(config-line)#transport input ssh 
r1(config-line)#access-class 90 in
r1(config-line)#exit

PC#ssh -l cisco  12.1.1.1

Password: 

r1>en
Password: 
r1#

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++==

route(config)#hostname cisco
route(config)#enable secret cisco 
cisco(config)#ip domain-name cisco.com
cisco(config)#crypto key generate rsa (general-keys) modulus 2048
//(access-list 90 permit 12.1.1.1)
#cisco(config)#ip ssh time-out 60
#cisco(config)#ip ssh authentication-retries 2
cisco(config)#username cisco password cisco
cisco(config)#line vty 0 4
//(access-class 90 in )
#cisco(config)#transport input none
cisco(config)#transport input ssh telnet
cisco(config)#login local

//然后在PC试验
PC#ssh -l cisco 12.1.1.1
-l 后面是用户名

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

cisco#sh run
Building configuration...

Current configuration : 1162 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$fMqP$doXFoR2eb1Hz6qDTpaTvk/
!
username cisco password 0 cisco
ip subnet-zero
ip cef
!
!
ip domain-name cisco
!
ip ssh authentication-retries 5
no mpls traffic-eng auto-bw timers frequency 0
call rsvp-sync
!
!
!
!
!
!
!
!
interface FastEthernet2/0
 ip address 192.168.20.1 255.255.255.0
 duplex full
 no clns route-cache
!
interface Serial4/0
 no ip address
 shutdown
 serial restart-delay 0
 no clns route-cache
!
interface Serial4/1
 no ip address
 shutdown
 serial restart-delay 0
 no clns route-cache
!
interface Serial4/2
 no ip address
 shutdown
 serial restart-delay 0
 no clns route-cache
!
interface Serial4/3
 no ip address
 shutdown
 serial restart-delay 0
 no clns route-cache
!
ip classless
!
no ip http server
!
!
!
!
!
!         
control-plane
!
!
dial-peer cor custom
!
!
!
banner motd ^C

(^(oo)^)

^C
!
line con 0
 exec-timeout 0 0
 logging synchronous
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 password cisco
 login local
 transport input telnet ssh
!
!
end