Centos 8 通过ansible的华为CE模块批量管理华为交换机
第一步：
华为交换机配置SSH
<dongzuo 3F>sys
<dongzuo 3F>system-view
Enter system view, return user view with Ctrl+Z.
[dongzuo 3F]rsa loca
[dongzuo 3F]rsa local-key-pair cre
[dongzuo 3F]rsa local-key-pair create
The key name will be: dongzuo 3F_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
it will take a few minutes.
Input the bits in the modulus[default = 512]:2048
Generating keys...
...........+++
....+++
....................................++++++++
........++++++++
[dongzuo 3F]dis
[dongzuo 3F]display ssh user-in
[dongzuo 3F]display ssh user-information
Info: No SSH user exists.
[dongzuo 3F]ssh user admin
Info: Succeeded in adding a new SSH user.
[dongzuo 3F]ssh user admin authentication-type pass
[dongzuo 3F]ssh user admin authentication-type password
[dongzuo 3F]ssh us
[dongzuo 3F]ssh user admin service-type stelnet
[dongzuo 3F]aaa
[dongzuo 3F-aaa]loca
[dongzuo 3F-aaa]local-user admin password cipgh
[dongzuo 3F-aaa]local-user admin password cipj
[dongzuo 3F-aaa]local-user admin password ciph
[dongzuo 3F-aaa]local-user admin password cipher XXXXX
[dongzuo 3F-aaa]loca
[dongzuo 3F-aaa]local-user admin privilege level 3
[dongzuo 3F-aaa]local
[dongzuo 3F-aaa]local-user test service-ty
[dongzuo 3F-aaa]local-user test service-type ?
8021x 802.1x user
bind Bind authentication user
ftp FTP user
http Http user
ppp PPP user
ssh SSH user
telnet Telnet user
terminal Terminal user
web Web authentication user
x25-pad X25-pad user
[dongzuo 3F-aaa]local-user admin service-type ?
8021x 802.1x user
bind Bind authentication user
ftp FTP user
http Http user
ppp PPP user
ssh SSH user
telnet Telnet user
terminal Terminal user
web Web authentication user
x25-pad X25-pad user
[dongzuo 3F-aaa]local-user admin service-type ssh
[dongzuo 3F-aaa]stelnet server enable
Info: Succeeded in starting the Stelnet server.
[dongzuo 3F]user-interface vty 0 4
[dongzuo 3F-ui-vty0-4]authen
[dongzuo 3F-ui-vty0-4]authentication-mode aaa
[dongzuo 3F-ui-vty0-4]protocol inbound ssh
[dongzuo 3F-ui-vty0-4]
然后
在Centos8上
ssh-keygen -t rsa
ssh-keyscan 172.22.160.20 >> /root/.ssh/known_hosts
把交换机的公钥放到C8的已知主机列表里
然后主动尝试安全的telnet到交换机上
ssh admin@172.22.160.20
查看有哪些端口，然后把没有开启的端口作为实验对象，记得实验结束要把端口恢复成原来的样子
ansible的安装自己去搞定，这么简单的事情就不说了
然后写剧本
执行剧本
