Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (S5735 V200R020C10SPC500)
Copyright (C) 2000-2020 HUAWEI TECH Co., Ltd.
HUAWEI S5735S-L24T4X-A1 Routing Switch uptime is 2 weeks, 1 day, 21 hours, 9 minutes

# 1. 确认当前状态
[spl_yinhang] display ssh server status
[spl_yinhang] display rsa local-key-pair public

# 2. 生成密钥（如果不存在）
[spl_yinhang] rsa local-key-pair create
2048

# 3. 启用 Stelnet/SSH
stelnet server enable

# 4. 创建 aaa 和 SSH 用户
aaa
 local-user admin password irreversible-cipher 123456
 local-user admin privilege level 15
 local-user admin service-type telnet ssh
 local-user operator password irreversible-cipher 123456
 local-user operator privilege level 3
 local-user operator service-type ssh
ssh user admin                            
ssh user admin authentication-type password
ssh user admin service-type stelnet
ssh user operator
ssh user operator service-type stelnet
ssh user operator authentication-type password
ssh server-source -i Vlanif2000 //重要

# 5. 配置 VTY
user-interface con 0
 authentication-mode password
 set authentication password cipher 123456
user-interface vty 0 4
 authentication-mode aaa
 protocol inbound ssh
 idle-timeout 10 0 //10分钟无操作退出
user-interface vty 16 20

# ========== 额外加固：ACL限制（可选但推荐） ==========

# 创建ACL，仅允许管理网段
acl number 2000
 rule 5 permit source 192.168.10.0 0.0.0.255
 rule 10 permit source 10.1.100.0 0.0.0.255    # 堡垒机网段
 rule 100 deny

# 应用到SSH
ssh server acl 2000

# 应用到Telnet（如启用）
telnet server acl 2000

验证命令

命令	用途
display ssh server status	查看SSH服务状态
display ssh server-source	查看SSH源配置
display telnet server status	查看Telnet状态
display telnet server-source	查看Telnet源配置
display tcp status	查看监听端口
display acl 2000	查看ACL规则