Using STelnet to Log In to Other Devices

You can use STelnet to log in to an SSH server from an SSH client to configure and manage the server.

Context

You can log in to the SSH server from the SSH client without the need of specifying the listening port number only when the listening port number of the server is 22. Otherwise, the listening port number must be specified.

Perform the following steps on the device that functions as an SSH client:

Procedure

Run system-view
The system view is displayed.
(Optional) Run ssh client cipher { des_cbc | 3des_cbc | aes128_cbc | aes192_cbc | aes256_cbc | aes128_ctr | aes192_ctr | aes256_ctr | arcfour128 | arcfour256 | aes128_gcm | aes256_gcm } ^*
An encryption algorithm is configured for the SSH client.

For security purposes, you are advised to use secure algorithms such as AES128_CTR, AES256_CTR, AES192_CTR, AES128_GCM, and AES256_GCM.
(Optional) Run ssh client hmac { md5 | md5_96 | sha1 | sha1_96 | sha2_256 | sha2_256_96 | sha2_512 } ^*
An HMAC authentication algorithm is configured for the SSH client.

For security purposes, you are advised to use a secure algorithm (SHA2_256 or SHA2_512.)
(Optional) Run ssh client key-exchange { dh_group14_sha1 | dh_group1_sha1 | dh_group_exchange_sha1 | dh_group_exchange_sha256 | dh_group16_sha512 | ecdh_sha2_nistp256 | ecdh_sha2_nistp384 | ecdh_sha2_nistp521 | sm2_kep } ^*
A key exchange algorithm list is configured for the SSH client.

For security purposes, you are advised to use the following key exchange algorithms: dh_group_exchange_sha256.
Run commit
The configuration is committed.
In the user view or system view, run the following command based on the status of the connection between the SSH client and server and the type of the source IP address.
- If the Layer 3 network connection is normal, and the source address is an IPv4 address:
  
  Run the stelnet [ -a source-ip-address ] [ -force-receive-pubkey ] host-ip-address [ server-port ] [ [ prefer_kex prefer_kex ] | [ prefer_ctos_cipher prefer_ctos_cipher ] | [ prefer_stoc_cipher prefer_stoc_cipher ] | [ prefer_ctos_hmac prefer_ctos_hmac ] | [ prefer_stoc_hmac prefer_stoc_hmac ] | [ prefer_ctos_compress zlib ] | [ prefer_stoc_compress zlib ] | [ -vpn-instance vpn-instance-name ] | [ -ki interval ] | [ -kc count ] | [ identity-key identity-key-type ] | [ user-identity-key user-key ] ] ^* command to use an IPv4 address to log in to the SSH server using STelnet.
- If the Layer 3 network connection is normal, and the source address is an IPv6 address:
  
  Run the stelnet ipv6 [ -a source-ipv6-address ] [ -force-receive-pubkey ] host-ipv6-address [ [ public-net | -vpn-instance vpn-instance-name ] | [ -oi { interface-name | interface-type interface-number } ] | [ server-port ] | [ prefer_kex prefer_kex ] | [ prefer_ctos_cipher prefer_ctos_cipher ] | [ prefer_stoc_cipher prefer_stoc_cipher ] | [ prefer_ctos_hmac prefer_ctos_hmac ] | [ prefer_stoc_hmac prefer_stoc_hmac ] | [ prefer_ctos_compress zlib ] | [ prefer_stoc_compress zlib ] | [ -ki interval ] | [ -kc count ] | [ identity-key identity-key-type ] | [ user-identity-key user-key ] ] ^* command to use an IPv6 address to log in to the SSH server using STelnet.
- If the Layer 3 network connection is abnormal, the Layer 2 link is normal, and the source address is an IPv4 address:
  
  Run the stelnet -tunnel lldp -a source-ip-address -i { interface-type interface-number | interface-name } host-ip-address [ server-port ] [ [ prefer_kex prefer_kex ] | [ prefer_ctos_cipher prefer_ctos_cipher ] | [ prefer_stoc_cipher prefer_stoc_cipher ] | [ prefer_ctos_hmac prefer_ctos_hmac ] | [ prefer_stoc_hmac prefer_stoc_hmac ] | [ prefer_ctos_compress zlib ] | [ prefer_stoc_compress zlib ] | [ -ki interval ] | [ -kc count ] | [ identity-key identity-key-type ] | [ user-identity-key user-key ] ] ^* command to use an IPv4 address to log in to the SSH server using STelnet.
- If the Layer 3 network connection is abnormal, the Layer 2 link is normal, and the source address is an IPv6 address:
  
  Run the stelnet ipv6 -tunnel lldp -a source-ipv6-address -i { interface-type interface-number | interface-name } host-ipv6-address [ server-port ] [ [ prefer_kex prefer_kex ] | [ prefer_ctos_cipher prefer_ctos_cipher ] | [ prefer_stoc_cipher prefer_stoc_cipher ] | [ prefer_ctos_hmac prefer_ctos_hmac ] | [ prefer_stoc_hmac prefer_stoc_hmac ] | [ prefer_ctos_compress zlib ] | [ prefer_stoc_compress zlib ] | [ -ki interval ] | [ -kc count ] | [ identity-key identity-key-type ] | [ user-identity-key user-key ] ] ^* command to use an IPv6 address to log in to the SSH server using STelnet.