Using STelnet to Log In to Other Devices
STelnet provides secure Telnet services. You can use STelnet to log in to and manage other devices from the device that you have logged in to.
Usage Scenario
Large numbers of devices need to be managed and maintained on a network. You cannot connect each device to a terminal. When no reachable route exists between remote devices and a terminal, you can use Telnet to log in to the remote devices from the device that you have logged in to. Telnet provides no secure authentication mode, and data is transmitted in simple mode over TCP, which brings security risks.
STelnet is a secure Telnet service based on SSH connections. SSH provides encryption and authentication and protects devices against attacks, such as IP spoofing. As shown in Figure 1, the device supports the SSH function. You can log in to a remote device in SSH mode to manage and maintain the device. The device that you have logged in functions as an SSH client, and the remote device functions as an SSH server.
- Configuring First Login to the SSH Server (Enabling First Login on the SSH Client)
- After first login is enabled on the SSH client (STelnet client in this case), the client does not check the validity of the RSA, DSA, or ECC public key for the SSH server when logging in to the SSH server for the first time.
- Configuring First Login to the SSH Server (Configuring the SSH Client to Assign the Public Key to the SSH Server)
- To allow the SSH client (STelnet client in this case) with initial authentication disabled to successfully log in to the SSH server for the first time, configure the SSH client to assign an RSA, DSA, SM2, or ECC public key to the SSH server before the login.
- (Optional) Configuring the Keepalive Feature on the SSH Client
- After the keepalive feature is configured on the SSH client, the client sends keepalive packets at the configured interval to the SSH server to check whether the connection between them is normal. The keepalive feature implements fast fault detection.
- Using STelnet to Log In to Other Devices
- You can use STelnet to log in to an SSH server from an SSH client to configure and manage the server.
- Verifying the Configuration of Using STelnet to Log In to Other Devices
- After completing the configuration for using STelnet to log in to other devices, you can view mappings between SSH servers and RSA or ECC public keys on the SSH client, global configuration of SSH servers, and sessions between SSH servers and the client.