HP VSR1000 Security Configuration Manual page 280

Configuration procedure
1. Configure the Stelnet server:
# Generate the RSA key pairs.
<RouterB> system-view
[RouterB] public-key local create rsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
........................++++++
...................++++++
..++++++++
............++++++++
Create the key pair successfully.
# Generate a DSA key pair.
[RouterB] public-key local create dsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
.++++++++++++++++++++++++++++++++++++++++++++++++++*
........+......+.....+......................................+
...+.................+..........+...+
Create the key pair successfully.
# Enable the SSH server function.
[RouterB] ssh server enable
# Assign an IP address to interface GigabitEthernet 1/0. The Stelnet client uses this address as the
destination address for SSH connection.
[RouterB] interface gigabitethernet 1/0
[RouterB-GigabitEthernet1/0] ip address 192.168.1.40 255.255.255.0
[RouterB-GigabitEthernet1/0] quit
# Set the authentication mode to AAA for the user lines.
[RouterB] line vty 0 63
[RouterB-line-vty0-63] authentication-mode scheme
[RouterB-line-vty0-63] quit
# Create a local device management user client001. Specify the plaintext password as aabbcc
and the service type as ssh for the user. Assign the user role network-admin to the user.
[RouterB] local-user client001 class manage
[RouterB-luser-manage-client001] password simple aabbcc
[RouterB-luser-manage-client001] service-type ssh
[RouterB-luser-manage-client001] authorization-attribute user-role network-admin
[RouterB-luser-manage-client001] quit
# Create an SSH user client001. Specify the service type as stelnet and the authentication method
as password for the user. By default, password authentication is used if no SSH user is created.
270