[vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n
\u5728\u9999\u6e2f\u7e41\u5fd9\u7684\u6578\u4f4d\u5316\u74b0\u5883\u4e2d\uff0c\u4f3a\u670d\u5668\u79df\u7528\u548c\u4f3a\u670d\u5668\u8a17\u7ba1\u670d\u52d9\u4f54\u64da\u4e3b\u5c0e\u5730\u4f4d\uff0c\u638c\u63e1VMware<\/a> ESXi\u548cSSH\u5c0d\u65bc\u6280\u8853\u5c08\u696d\u4eba\u58eb\u4f86\u8aaa\u81f3\u95dc\u91cd\u8981\u3002\u672c\u6307\u5357\u6df1\u5165\u63a2\u8a0e\u4e86\u5728VMware ESXi\u4e0a\u555f\u7528SSH\u7684\u7d30\u7bc0\uff0c\u9019\u662f\u9ad8\u6548\u7ba1\u7406\u9999\u6e2f\u4f3a\u670d\u5668<\/a>\u7684\u5fc5\u5099\u6280\u80fd\u3002\u7121\u8ad6\u60a8\u662f\u7d93\u9a57\u8c50\u5bcc\u7684\u7cfb\u7d71\u7ba1\u7406\u54e1\u9084\u662f\u597d\u5947\u7684\u65b0\u624b\uff0c\u8acb\u7e6b\u597d\u5b89\u5168\u5e36\uff0c\u6df1\u5165\u63a2\u7d22\u9060\u7aef\u4f3a\u670d\u5668\u7ba1\u7406\u7684\u4e16\u754c\u3002<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n VMware ESXi\uff0c\u9019\u6b3e\u88f8\u6a5f\u865b\u64ec\u6a5f\u7ba1\u7406\u7a0b\u5e8f\uff0c\u69cb\u6210\u4e86\u9999\u6e2f\u8cc7\u6599\u4e2d\u5fc3\u8a31\u591a\u865b\u64ec\u5316\u8a2d\u7f6e\u7684\u9aa8\u5e79\u3002\u5176\u7cbe\u7c21\u7684\u67b6\u69cb\u548c\u5f37\u5927\u7684\u6027\u80fd\u4f7f\u5176\u6210\u70ba\u4f3a\u670d\u5668\u79df\u7528\u63d0\u4f9b\u5546\u548c\u4f3a\u670d\u5668\u8a17\u7ba1\u8a2d\u65bd\u7684\u9996\u9078\u3002\u4f46\u5982\u679c\u6c92\u6709\u9ad8\u6548\u7684\u9060\u7aef\u5b58\u53d6\uff0c\u5f37\u5927\u7684\u865b\u64ec\u6a5f\u7ba1\u7406\u7a0b\u5e8f\u53c8\u6709\u4ec0\u9ebc\u7528\u5462\uff1f\u9019\u5c31\u662fSSH\uff08\u5b89\u5168\u5916\u6bbc\uff09\u7684\u7528\u6b66\u4e4b\u5730\uff0c\u5b83\u662f\u9060\u7aef\u4f3a\u670d\u5668\u7ba1\u7406\u7684\u7121\u540d\u82f1\u96c4\u3002<\/p>\n \u5728VMware ESXi\u4e0a\u555f\u7528SSH\u958b\u555f\u4e86\u4e00\u500b\u5145\u6eff\u53ef\u80fd\u6027\u7684\u4e16\u754c\uff1a<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n \u8b93\u6211\u5011\u76f4\u63a5\u958b\u59cb\u5728VMware ESXi\u4e3b\u6a5f\u4e0a\u555f\u7528SSH\u3002\u6211\u5011\u5c07\u63a2\u8a0e\u591a\u7a2e\u65b9\u6cd5\uff0c\u56e0\u70ba\u771f\u6b63\u7684\u6975\u5ba2\u7e3d\u662f\u6709\u5099\u7528\u8a08\u5283\uff1a<\/p>\n 1. \u555f\u52d5vSphere Client\u4e26\u9023\u63a5\u5230\u60a8\u7684ESXi\u4e3b\u6a5f\u3002 1. \u5728\u700f\u89bd\u5668\u4e2d\u8a2a\u554fhttps:\/\/your-esxi-ip\/ui \u5c0d\u65bc\u90a3\u4e9b\u751f\u6d3b\u5728\u547d\u4ee4\u5217\u4e2d\u7684\u4eba\uff1a<\/p>\n \u5c08\u696d\u63d0\u793a\uff1a\u60a8\u53ef\u4ee5\u901a\u904eESXi Shell\u57f7\u884c\u9019\u4e9b\u547d\u4ee4\uff0c\u6216\u8005\u5982\u679c\u60a8\u53ef\u4ee5\u5b58\u53d6vCenter\uff0c\u5247\u53ef\u4ee5\u901a\u904e\u9060\u7aef\u547d\u4ee4\u57f7\u884c\u3002<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n \u555f\u7528SSH\u53ea\u662f\u958b\u59cb\u3002\u5728\u9999\u6e2f\u7af6\u722d\u6fc0\u70c8\u7684\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\uff0c\u5b89\u5168\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u52a0\u5f37SSH\u9023\u63a5\u7684\u65b9\u6cd5\uff1a<\/p>\n \u62cb\u68c4\u5bc6\u78bc\uff0c\u64c1\u62b1SSH\u5bc6\u9470\u7684\u529b\u91cf\uff1a<\/p>\n \u5c07SSH\u5b58\u53d6\u9650\u5236\u5230\u7279\u5b9aIP\u7bc4\u570d\uff1a<\/p>\n \u4e0d\u8981\u8b93\u7a7a\u9592\u6703\u8a71\u6301\u7e8c\u5b58\u5728\uff1a<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n \u5728\u9999\u6e2f\u5feb\u7bc0\u594f\u7684\u4f3a\u670d\u5668\u7ba1\u7406\u4e16\u754c\u4e2d\uff0c\u5bc6\u5207\u95dc\u6ce8SSH\u6d3b\u52d5\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u5982\u4f55\u6210\u70baSSH\u76e3\u63a7\u5fcd\u8005\uff1a<\/p>\n \u5b9a\u671f\u6aa2\u67e5SSH\u65e5\u8a8c\u4ee5\u767c\u73fe\u53ef\u7591\u6d3b\u52d5\uff1a<\/p>\n \u8a2d\u7f6efail2ban\u4ee5\u81ea\u52d5\u963b\u6b62\u53ef\u7591IP\u5730\u5740\uff1a<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n \u5373\u4f7f\u5728\u9999\u6e2f\u7684\u9ad8\u79d1\u6280\u4f3a\u670d\u5668\u74b0\u5883\u4e2d\uff0c\u4e5f\u53ef\u80fd\u6703\u51fa\u73fe\u554f\u984c\u3002\u4ee5\u4e0b\u662f\u60a8\u7684\u6545\u969c\u6392\u9664\u5de5\u5177\u5305\uff1a<\/p>\n \u6aa2\u67e5SSH\u670d\u52d9\u662f\u5426\u6b63\u5728\u904b\u884c\uff1a<\/p>\n \u9a57\u8b49\u60a8\u7684SSH\u5bc6\u9470\u6b0a\u9650\uff1a<\/p>\n \u6aa2\u67e5\u4e26\u4fee\u6539\u9632\u706b\u7246\u898f\u5247\uff1a<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n \u5728VMware ESXi\u4e0a\u555f\u7528\u548c\u7ba1\u7406SSH\u662f\u4efb\u4f55\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u548c\u4f3a\u670d\u5668\u8a17\u7ba1\u670d\u52d9\u9818\u57df\u5de5\u4f5c\u7684IT\u5c08\u696d\u4eba\u58eb\u7684\u95dc\u9375\u6280\u80fd\u3002\u901a\u904e\u9075\u5faa\u672c\u6307\u5357\uff0c\u60a8\u5df2\u7d93\u638c\u63e1\u4e86\u9ad8\u6548\u7ba1\u7406\u4f3a\u670d\u5668\u3001\u589e\u5f37\u5b89\u5168\u6027\u548c\u50cf\u5c08\u696d\u4eba\u58eb\u4e00\u6a23\u9032\u884c\u6545\u969c\u6392\u9664\u7684\u77e5\u8b58\u3002\u8acb\u8a18\u4f4f\uff0c\u5728\u4f3a\u670d\u5668\u7ba1\u7406\u7684\u4e16\u754c\u88e1\uff0c\u77e5\u8b58\u5c31\u662f\u529b\u91cf\uff0c\u800cSSH\u662f\u91cb\u653e\u9019\u7a2e\u529b\u91cf\u7684\u95dc\u9375\u3002<\/p>\n \u7576\u60a8\u7e7c\u7e8c\u5728\u9999\u6e2f\u5145\u6eff\u6d3b\u529b\u7684\u4f3a\u670d\u5668\u74b0\u5883\u4e2d\u63a2\u7d22\u6642\uff0c\u8acb\u7e7c\u7e8c\u5b78\u7fd2\uff0c\u7e7c\u7e8c\u63a2\u7d22\uff0c\u6700\u91cd\u8981\u7684\u662f\uff0c\u4fdd\u6301\u60a8\u7684SSH\u9023\u63a5\u5b89\u5168\u3002<\/p>\n [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":" [vc_row el_class=”blog-detail-section”][vc_ […]<\/p>\n\u5f37\u5f37\u806f\u624b\uff1aVMware ESXi\u548cSSH\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u9818\u57df\u7684\u61c9\u7528<\/strong><\/h2>\n
\n
\u5728VMware ESXi\u4e0a\u91cb\u653eSSH\uff1a\u6975\u5ba2\u9010\u6b65\u6307\u5357<\/strong><\/h2>\n
\u65b9\u6cd51\uff1avSphere Client – \u5716\u5f62\u754c\u9762\u65b9\u5f0f<\/h3>\n
\n2. \u5c0e\u822a\u5230\u914d\u7f6e > \u5b89\u5168\u914d\u7f6e\u6a94\u6848\u3002
\n3. \u67e5\u627e\u300c\u670d\u52d9\u300d\u4e26\u627e\u5230SSH\u3002
\n4. \u9ede\u64ca\u300c\u5c6c\u6027\u300d\u4e26\u5c07SSH\u8a2d\u7f6e\u70ba\u300c\u96a8\u4e3b\u6a5f\u555f\u52d5\u548c\u505c\u6b62\u300d\u3002
\n5. \u5982\u679cSSH\u670d\u52d9\u5c1a\u672a\u904b\u884c\uff0c\u8acb\u555f\u52d5\u5b83\u3002<\/p>\n\u65b9\u6cd52\uff1aESXi Host Client – \u9069\u5408Web\u611b\u597d\u8005<\/h3>\n
\n2. \u4f7f\u7528\u60a8\u7684\u6191\u64da\u767b\u5165\u3002
\n3. \u8f49\u5230\u7ba1\u7406 > \u670d\u52d9\u3002
\n4. \u627e\u5230SSH\u670d\u52d9\u4e26\u9ede\u64ca\u300c\u555f\u52d5\u300d\u6309\u9215\u3002
\n5. \u53ef\u9078\u64c7\u8a2d\u7f6e\u70ba\u958b\u6a5f\u81ea\u52d5\u555f\u52d5\u3002<\/p>\n\u65b9\u6cd53\uff1aESXi Shell – \u771f\u6b63\u6975\u5ba2\u7684\u65b9\u6cd5<\/h3>\n
# \u555f\u7528SSH\r\nvim-cmd hostsvc\/enable_ssh\r\n\r\n# \u555f\u52d5SSH\u670d\u52d9\r\nvim-cmd hostsvc\/start_ssh\r\n\r\n# \u8a2d\u7f6eSSH\u958b\u6a5f\u81ea\u555f\u52d5\r\nvim-cmd hostsvc\/autostartmanager\/enable_autostart\r\nvim-cmd hostsvc\/autostartmanager\/update_autostart ssh true\r\n<\/code><\/pre>\n\u4fdd\u8b77\u60a8\u7684SSH\u9023\u63a5\uff1a\u9999\u6e2f\u4f3a\u670d\u5668\u7248<\/strong><\/h2>\n
1. \u5be6\u65bd\u57fa\u65bc\u5bc6\u9470\u7684\u8eab\u4efd\u9a57\u8b49<\/h3>\n
# \u5728\u672c\u5730\u6a5f\u5668\u4e0a\u751f\u6210SSH\u5bc6\u9470\u5c0d\r\nssh-keygen -t rsa -b 4096\r\n\r\n# \u5c07\u516c\u9470\u8907\u88fd\u5230ESXi\u4e3b\u6a5f\r\nssh-copy-id -i ~\/.ssh\/id_rsa.pub root@your-esxi-ip\r\n\r\n# \u5728\/etc\/ssh\/sshd_config\u4e2d\u7981\u7528\u5bc6\u78bc\u8a8d\u8b49\r\nPasswordAuthentication no\r\n<\/code><\/pre>\n2. \u9632\u706b\u7246\u914d\u7f6e<\/h3>\n
# \u5141\u8a31\u7279\u5b9aIP\u7bc4\u570d\u7684SSH\u5b58\u53d6\r\nesxcli network firewall ruleset set -e true -r sshClient\r\nesxcli network firewall ruleset allowedip add -r sshClient -i 192.168.1.0\/24\r\n<\/code><\/pre>\n3. \u8a2d\u7f6eSSH\u8d85\u6642<\/h3>\n
# \u6dfb\u52a0\u5230\/etc\/ssh\/sshd_config\r\nClientAliveInterval 300\r\nClientAliveCountMax 2\r\n<\/code><\/pre>\n\u76e3\u63a7SSH\u6d3b\u52d5\uff1a\u5728\u9999\u6e2f\u8cc7\u6599\u4e2d\u5fc3\u4fdd\u6301\u8b66\u60d5<\/strong><\/h2>\n
1. \u65e5\u8a8c\u5206\u6790<\/h3>\n
# \u67e5\u770bSSH\u65e5\u8a8c\r\ncat \/var\/log\/auth.log | grep sshd\r\n\r\n# \u5373\u6642\u65e5\u8a8c\u76e3\u63a7\r\ntail -f \/var\/log\/auth.log | grep sshd\r\n<\/code><\/pre>\n2. \u5be6\u65bd\u5165\u4fb5\u6aa2\u6e2c<\/h3>\n
# \u5b89\u88ddfail2ban\uff08\u5982\u679c\u5c1a\u672a\u9810\u88dd\uff09\r\nesxcli software vib install -v \/path\/to\/fail2ban.vib\r\n\r\n# \u70baSSH\u914d\u7f6efail2ban\r\n[ssh-iptables]\r\nenabled = true\r\nfilter = sshd\r\naction = iptables[name=SSH, port=ssh, protocol=tcp]\r\nlogpath = \/var\/log\/auth.log\r\nmaxretry = 5\r\n<\/code><\/pre>\nVMware ESXi\u4e0a\u7684SSH\u6545\u969c\u6392\u9664\uff1a\u6975\u5ba2\u6a21\u5f0f\u6fc0\u6d3b<\/strong><\/h2>\n
1. SSH\u9023\u63a5\u88ab\u62d2\u7d55<\/h3>\n
# \u901a\u904eESXi Shell\r\n\/etc\/init.d\/SSH status\r\n\r\n# \u5982\u679c\u9700\u8981\uff0c\u91cd\u555fSSH\r\n\/etc\/init.d\/SSH restart\r\n<\/code><\/pre>\n2. \u8eab\u4efd\u9a57\u8b49\u554f\u984c<\/h3>\n
# \u5728\u60a8\u7684\u672c\u5730\u6a5f\u5668\u4e0a\r\nchmod 600 ~\/.ssh\/id_rsa\r\nchmod 644 ~\/.ssh\/id_rsa.pub\r\n<\/code><\/pre>\n3. \u9632\u706b\u7246\u963b\u64cb<\/h3>\n
# \u5217\u51fa\u9632\u706b\u7246\u898f\u5247\r\nesxcli network firewall ruleset list\r\n\r\n# \u81e8\u6642\u5141\u8a31SSH\r\nesxcli network firewall ruleset set -e true -r sshServer\r\n<\/code><\/pre>\n\u7d50\u8ad6<\/strong><\/h2>\n