Ssh Configuration Example - 3Com Switch 7700 Configuration Manual

380 C 11: S M
HAPTER YSTEM ANAGEMENT
SSH Configuration See Figure 13 for an illustration of the local connection configuration from the
Example SSH client to the switch. The client uses the SSH protocol to access the switch.
Figure 13 Networking for SSH Local Configuration
2
1
1 SSH client
2 Switch
To configure SSH, do the following:
1 Configure the local key pair:
[SW7700]rsa local-key-pair create
You should run this command before any other configuration unless you have
configured the local key pair in advance.
a For password authentication mode:
[SW7700]user-interface vty 0 4
[SW7700-ui-vty0-4]authentication-mode scheme
[SW7700-ui-vty0-4]protocol inbound ssh
[SW7700]local-user client001
[SW7700-luser-client001]password simple secret
[SW7700-luser-client001]service-type ssh
[SW7700]ssh user client001 authentication-type password
Select the default values for SSH authentication timeout value, retry value and
update interval of server key. Then run SSH1.5 client program on the PC which is
connected to the switch and access the switch using username "client001" and
password "secret".
b For RSA authentication mode:
Create a local user client002
[SW7700]local-user client002
[SW7700-luser-client002]service-type ssh
Specify AAA authentication on the user interface.
[SW7700]user-interface vty 0 4
[SW7700-ui-vty0-4]authentication-mode scheme
Select the SSH protocol on the switch.
[SW7700-ui-vty0-4]protocol inbound ssh
Specify RSA authentication on the switch.
[SW7700]ssh user client002 authentication-type RSA
Configure the RSA key pair on the switch.
[SW7700]rsa peer-public-key key002
[SW7700-rsa-public]public-key-code begin
[SW7700-key-code]308186028180739A291ABDA704F5D93DC8FDF84C427463
[SW7700-key-code]1991C164B0DF178C55FA833591C7D47D5381D09CE82913
[SW7700-key-code]D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4
[SW7700-key-code]0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC