Publickey Authentication Enabled Stelnet Client Configuration Example - HP VSR1000 Security Configuration Manual

[RouterA-pkey-public-key-key1]485348
[RouterA-pkey-public-key-key1] peer-public-key end
[RouterA] quit
# Establish an SSH connection to the server, and specify the host public key of the server.
<RouterA> ssh2 192.168.1.40 publickey key1
Username: client001
client001@192.168.1.40's password:
After you enter the correct password, you log in to Router B successfully.
If the client does not have the server's host public key, the system will prompt you to confirm the
further access when you access the server. Select Yes to access the server and download the
server's host public key.
<RouterA> ssh2 192.168.1.40
Username: client001
The server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:y
client001@192.168.1.40's password:
After you enter the correct password, you can access Router B successfully. At the next
connection attempt, the client authenticates the server by using the saved server's host public
key on the client.
Publickey authentication enabled Stelnet client configuration
example
Network requirements
As shown in
• You can log in to Router B through the Stelnet client that runs on Router A.
After login, you are assigned the user role network-admin for configuration management.
•
Router B acts as the Stelnet server and uses publickey authentication and the DSA public key
•
algorithm.
Figure 75 Network diagram
Configuration procedure
In the server configuration, the client's host public key is required. Use the client software to generate a
DSA key pair on the client before configuring the Stelnet server.
1. Configure the Stelnet client:
# Assign an IP address to interface GigabitEthernet 1/0.
<RouterA> system-view
[RouterA] interface gigabitethernet 1/0
[RouterA-GigabitEthernet1/0] ip address 192.168.1.56 255.255.255.0
[RouterA-GigabitEthernet1/0] quit
Figure 75:
272