Ssh Client Configuration; Displaying Ssh Configuration - 3Com 5500-SI Configuration Manual

SSH Client Configuration

Displaying SSH
Configuration
Table 186 describes SSH configuration tasks.
Table 186 Configure SSH client
Operation
Enter system view
Enable the connection
between SSH client and
server
Allocate a public key to
the server
Configure the client to
run the initial
authentication
In the initial authentication, if the SSH client does not have the public key for the
server which it accesses for the first time, the client continues to access the server and
save locally the public key of the server. Then at the next access, the client can
authenticate the server using the public key saved locally.
Use the display commands in any view to view the running of SSH and further to
check the configuration result.
Table 187 Display SSH configuration
Operation
Display host and server public keys
Display client RSA public key
Display SSH status and session
information
Display SSH user information
Users using SecureCRT as the client side software will fail to log onto a switch if they
check the Enable OpenSSH agent forwarding option.
Command
system-view
ssh2 host-ipaddr [ port ] [ prefer_kex {
dh_group1 | dh_exchange_group } ] [
prefer_ctos_cipher { des | aes128 } ] [
prefer_stoc_cipher { des | aes128 } ] [
prefer_ctos_hmac { sha1 | sha1_96 |
md5 | md5_96 } ] [ prefer_stoc_hmac
{ sha1 | sha1_96 | md5 | md5_96 } ]
ssh client server-ip assign rsa-key
keyname
ssh client first-time enable
Command
display rsa local-key-pair public
display rsa peer-public-key [ brief | name keyname ]
display ssh server { status | session }
display ssh user-information [ username ]
SSH Terminal Services 205
Description
-
Required
You can use this command to
enable the connection between
SSH client and server, define
key exchange algorithm
preference, encryption
algorithm preference and
HMAC algorithm preference
between the server and client.
Required
You can specify on the client
the public key for the server to
be connected to guarantee the
client can be connected to a
reliable server.
Optional
By default, the client runs the
initial authentication.