D-Link DGS-1510 Series Reference Manual page 539

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
hostbased URL
host-name HOSTNAME
IP-ADDRESS
IPV6-ADDRESS
Default
The default authentication method for a user is password.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 15.
Usage Guideline
The administrator can use this command to specify authentication method for a user. The user name
must be a user created by the username command. By default, the authentication method is
password. The system will prompt the user to input the password.
To authenticate a user via SSH public key authentication, copy the user's public key file to file system.
When the user tries to login to the Switch via an SSH client (using the SSH public key method), the
SSH client will automatically transmit the public key and signature with the private key to the Switch. If
both the public key and signature are correct, the user is authenticated and login into the Switch is
allowed.

To authenticate a user via SSH public key authentication via SSH public key or the host-
based method, the user's public key file or client's host key file must be specified. Both key
files have the same format. A key file can contain multiple keys and each key is defined by
one line. The maximum length of one line is 8 Kb.

Each key consists of the following space-separated fields: keytype, base64-encoded key, and
comment. The keytype and base64-encoded key fields are mandatory and the comment field
is optional. The keytype field can be either be ssh-dss or ssh-rsa.
Example
This example shows how to configure the authentication method to public key for user user1.
Switch# configure terminal
Switch(config)# ssh user tom authentication-method publickey c:/user1.pub
Switch(config)#
account. Enter the URL of a local file to be used as the public key of
this user.
Specifies to use the host-based authentication method for this user
account. Enter the URL of a local file to be used as client's host key.
Specifies the allowed host name for host-based authentication.
During authentication phase, the client's hostname will be checked.
The range is from 1 to 255.
(Optional) Specifies whether to additionally check the IP address of
the client for host-based authentication. If not specified, only the
host name will be checked.
(Optional) Specifies whether to additionally check the IPv6 address
of the client for host-based authentication. If not specified, only the
host name will be checked.
536