HP 3600 v2 Series Command Reference Manual page 265

ssh user username service-type { all | sftp } authentication-type { password | { any |
password-publickey | publickey } assign publickey keyname work-directory directory-name }
undo ssh user username
View
System view
Default level
3: Manage level
Parameters
username: SSH username, a case-sensitive string of 1 to 80 characters.
service-type: Specifies the service type of an SSH user, which can be one of the following:
all: Specifies both secure Telnet and secure FTP.
•
• sftp: Specifies the service type as secure FTP.
stelnet: Specifies the service type of secure Telnet.
•
authentication-type: Specifies the authentication method of an SSH user, which can be one of the
following:
password: Performs password authentication. This authentication method features easy and fast
•
encryption, but it is vulnerable. It can work with AAA to implement user authentication,
authorization, and accounting.
• any: Performs either password authentication or publickey authentication.
password-publickey: Performs both password authentication and publickey authentication
•
(featuring higher security) if the client runs SSH2, and performs either type of authentication if the
client runs SSH1.
publickey: Performs publickey authentication. This authentication method has the downside of
•
complicated and slow encryption, but it provides strong authentication that can defend against
brute-force attacks. This authentication method is easy to use. Once it is configured, the
authentication process completes automatically without the need of remembering or entering any
password.
assign publickey keyname: Assigns an existing public key to an SSH user. keyname indicates the name
of the client public key and is a string of 1 to 64 characters.
work-directory directory-name: Specifies the working directory for an SFTP user. directory-name
indicates the name of the working directory and is a string of 1 to 135 characters.
Description
Use the ssh user command to create an SSH user and specify the service type and authentication
method.
Use the undo ssh user command to delete an SSH user.
For a publickey authentication user, you must configure the username and the public key on the switch.
For a password authentication user, you can configure the account information on either the switch or the
remote authentication server, such as a RADIUS server.
If you use the ssh user command to configure a public key for a user who has already had a public key,
the new one overwrites the old one.
255