HP A6600 Configuration Manual page 333

Likewise, to save the private key, click Save private key. A warning window appears to prompt you
whether to save the private key without any protection. Click Yes and enter the name of the file for
saving the key (private.ppk in this case).
Figure 111 Save the private key on the client
Then, you must transmit the public key file to the server through FTP or TFTP.
Configure the SSH server.
2.
# Generate RSA and DSA key pairs, and enable SSH server.
<Router> system-view
[Router] public-key local create rsa
[Router] public-key local create dsa
[Router] ssh server enable
# Configure an IP address for interface GigabitEthernet 1/0/1, which the SSH client uses as the
destination for SSH connection.
[Router] interface GigabitEthernet 1/0/1
[Router-GigabitEthernet1/0/1] ip address 192.168.1.40 255.255.255.0
[Router-GigabitEthernet1/0/1] quit
# Set the authentication mode for the user interfaces to AAA.
[Router] user-interface vty 0 4
[Router-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[Router-ui-vty0-4] protocol inbound ssh
# Set the user command privilege level to 3.
[Router-ui-vty0-4] user privilege level 3
[Router-ui-vty0-4] quit
# Import the client's public key from file key.pub and name it Router001.
[Router] public-key peer Router001 import sshkey key.pub
# Specify the authentication method for user client002 as publickey, and assign the public key Router001
to the user.
[Router] ssh user client002 service-type stelnet authentication-type publickey assign
publickey Router001
321