Configuring Whether First-Time Authentication Is Supported - HP 5120 EI Switch Series Configuration Manual

To do...

Configuring whether first-time authentication is supported

When the device connects to the SSH server as an SSH client, you can configure whether the device
supports first-time authentication.
With first-time authentication, when an SSH client not configured with the server host public key

accesses the server for the first time, the user can continue accessing the server, and save the host
public key on the client. When accessing the server again, the client will use the saved server host
public key to authenticate the server.
Without first-time authentication, a client not configured with the server host public key will refuse to

access the server. To enable the client to access the server, you must configure the server host public
key and specify the public key name for authentication on the client in advance.
Enable the device to support first-time authentication
Follow these steps to enable the device to support first-time authentication:
To do...
Enter system view
Enable the device to support first-
time authentication
Disable first-time authentication
For successful authentication of an SSH client not supporting first-time authentication, the server host
public key must be configured on the client and the public key name must be specified.
Follow these steps to disable first-time authentication:
To do...
Enter system view
Disable first-time authentication
support
Configure the server host public
key
Specify the host public key name
of the server
Use the command...
Specify a
source IPv6
ssh client ipv6 source { ipv6 ipv6-address |
address or
interface interface-type interface-number }
interface for
the SSH client
Use the command...
system-view
ssh client first-time enable
Use the command...
system-view
undo ssh client first-time
See ―Configuring a client public
key.‖
ssh client authentication server
server assign publickey keyname
Remarks
—
Optional
By default, first-time authentication
is supported on a client.
Remarks
—
Required
By default, first-time authentication
is supported on a client.
Required
The method for configuring the
server host public key on the client
is similar to that for configuring
client public key on the server.
Required
216
Remarks
client uses the IP
address of the
interface specified
by the route of the
device to access
the SSH server.