| 场景 | 自动化脚本免密、跳板机集中运维 |
|---|---|
| 适用 | 全部设备 |
| 命令族 | rsa peer-public-key / ip ssh pubkey-chain / public-key peer |
华为 VRP
华为 VRP
[Huawei] rsa peer-public-key OPS-PC
[Huawei-rsa-public-key] public-key-code begin
(粘贴对端公钥 hex)
[Huawei-rsa-public-key] public-key-code end
[Huawei] ssh user ops authentication-type rsa
[Huawei] ssh user ops assign rsa-key OPS-PC思科 IOS
思科 IOS
SW-CORE-01(config)# ip ssh pubkey-chain
SW-CORE-01(conf-ssh-pubkey)# username ops
SW-CORE-01(conf-ssh-pubkey-user)# key-string
(粘贴公钥)
! 或只存指纹：key-hash ssh-rsa <MD5>H3C Comware
H3C Comware
[H3C] public-key peer OPS-PC
[H3C-pkey-public-key] public-key-code begin
(粘贴对端公钥 hex)
[H3C-pkey-public-key] public-key-code end
[H3C] ssh user ops service-type stelnet authentication-type publickey assign publickey OPS-PC华为/H3C 是同构的 peer public-key 模型；思科用 pubkey-chain 或 key-hash 指纹；运维日常仍以口令为主，公钥认证建议限定专属自动化账号。