[计算机网络]ensp端口安全

交换机
user-interface console 0
authentication-mode password
set authentication password simple Huawei
idle-timeout 30

user-interface vty 0 4
protocol inbound telnet
authentication-mode password
set authentication password simple Huawe1
user privilege level 15
idle-timeout 30 40

端口安全
interface Eth0/0/1
port-security enable
port-security max-mac-num 3
port-security mac-address sticky
port-security mac-address sticky 5489-98A3-1993 vlan 1
port-security protect-action shutdown

port-group 1
group-member e0/0/1 e0/0/3 e0/0/7 to e0/0/9   \\将e0/0/1、e0/0/3、e0/0/7、e0/0/8和e0/0/9加入到本端口组，对端口组执行的命令会同步执行在该端口组内的所有端口上。


在AR上配置VTY
rsa local-key-pair create
stelnet server enable
user-interface vty 0 4
protocol inbound ssh
authentication-mode aaa
idle-timeout 30 40

aaa
local-user sziit password simple sziit
local-user sziit service-type ssh
local-user sziit privilege level 15
quit

ssh user sziit authentication-type password

测试SSH
ssh client first-time enable
stelnet ip