3Com WX3000 Series Operation Manual page 517

Follow these steps to enable the device to support first-time authentication:
To do...
Enter system view
Enable the device to support
first-time authentication
Follow these steps to disable first-time authentication support:
To do...
Enter system view
Disable first-time authentication
support
Configure server public key
Specify the host key name of
the server
Establish the connection between the SSH client and server
The client's method of establishing an SSH connection to the SSH server varies with authentication
types. See the table below for details.
Follow these steps to establish an SSH connection:
To do...
Enter system view
Start the client to establish a
connection with an SSH server
Use the command...
system-view
ssh client first-time enable
Use the command...
system-view
undo ssh client first-time
Refer to Configuring the Client
Public Key on the Server
ssh client { server-ip |
server-name } assign
{ publickey | rsa-key }
keyname
Use the command...
system-view
ssh2 { host-ip | host-name }
[ port-num ] [ identity-key { dsa
| rsa } | prefer_kex
{ dh_group1 |
dh_exchange_group } |
prefer_ctos_cipher { des |
aes128 } | prefer_stoc_cipher
{ des | aes128 } |
prefer_ctos_hmac { sha1 |
sha1_96 | md5 | md5_96 } |
prefer_stoc_hmac { sha1 |
sha1_96 | md5 | md5_96 } ] *
1-20
Remarks
—
Optional
By default, the client is enabled
to run initial authentication.
Remarks
—
Required
By default, the client is enabled
to run first-time authentication.
Required
The method of configuring
server public key on the client is
similar to that of configuring
client public key on the server.
Required
Remarks
—
Required
In this command, you can also
specify the preferred key
exchange algorithm, encryption
algorithms and HMAC
algorithms between the server
and client.
HMAC: Hash-based message
authentication code
Note that:
The identity-key keyword is
unnecessary in password
authentication and optional in
public key authentication.