Juniper Junos SSH 证书免密登录
2021-12-11 本文已影响0人
随卐星
在linux 上使用ssh-keygen 生成公钥和私钥。 enter passphrase 这个是对生成的密钥文件加密,如果留 空不加密都能被cat直接查看。
id_rsa.pub生成的公钥,id_rsa是生成的私钥。将生成的公钥放到junos系统上关联上对应的用户,这个用户就能直接登录。
指定私钥登录设备
ssh -i /path/to/id_rsa user@server
root@linrouter:~# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
b9:70:89:4c:65:b0:29:0d:0a:52:7b:13:91:e4:eb:67 root@linrouter
The key's randomart image is:
+--[ RSA 2048]----+
|o...=o..o |
|.. +.+ = |
| o = = |
| . * . o |
| . + S |
| . o . |
| . E . |
| o |
| |
+-----------------+
root@linrouter:~# cat .ssh/id_rsa.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmWk9y00c6NQQhZDE1yWJE0vnYMf2DbfDrytpQ1ZtK6T5tMnHHQR5
NwjOtsE2jBKTx3HhaYb/NcV7LJ3XRrY/5K6tSxKND3+fnW+GSKl/h5VWPQEXsiZgNy5Hh9dRQ+HZUinh7gbMo5d
/4JLREHF4xEcFvKjGz3Ez7I4xxTHyb6QOKcOvBjou5C089F/BDR7ya/xsQZSAueraeArL3h3RcM8VwLSikmvXsi4x
xMscJ9ali+YqTrKiF7o5cd4mdKo9F6cYJW7vK8+pUPdJ/6DbHqvocRp/U3V5fHdljxkD/y0YVBGnNgGEutIt2J3pbfV
w7uG9RXwehypm0p9w1V6hF root@linrouter
root@jgw25# show system login
user admin {
class super-user;
authentication {
ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmWk9y00c6NQQhZDE1yWJE0vnYMf2DbfDrytpQ1ZtK6T5tMnHHQR5
NwjOtsE2jBKTx3HhaYb/NcV7LJ3XRrY/5K6tSxKND3+fnW+GSKl/h5VWPQEXsiZgNy5Hh9dRQ+HZUinh7gbMo5d
/4JLREHF4xEcFvKjGz3Ez7I4xxTHyb6QOKcOvBjou5C089F/BDR7ya/xsQZSAueraeArL3h3RcM8VwLSikmvXsi4x
xMscJ9ali+YqTrKiF7o5cd4mdKo9F6cYJW7vK8+pUPdJ/6DbHqvocRp/U3V5fHdljxkD/y0YVBGnNgGEutIt2J3pbfV
w7uG9RXwehypm0p9w1V6hF root@linrouter";
}
}
root@linrouter:~# ssh admin@192.168.193.10
admin@jgw25>