Configuring Ssh Server - Huawei Quidway S3500 Series Operation Manual

Operation Manual - System Management
Quidway S3500 Series Ethernet Switches

8.1.2 Configuring SSH Server

Basic configuration tasks refer to those required for successful connection from SSH
client to SSH server, which advanced configuration tasks are those modifying SSH
parameters.
Configuration tasks on SSH server include:
Setting system protocol and link maximum
Configuring and deleting local RSA key pair
Configuring authentication type
Defining update interval of server key
Defining SSH authentication timeout value
Defining SSH authentication retry value
Entering public key view and editing public key
Associating public key with SSH user
I. Setting system protocol
You must specify SSH protocol for the system before enabling SSH.
Please perform the following configuration in VTY user interface view.
Table 8-1 Setting system protocols and link maximum
Set system protocol and link maximum
By default, the system supports both Telnet and SSH protocols.
Caution:
If SSH protocol is specified, to ensure a successful login, you must configure the AAA
authentication using the authentication-mode scheme command. The protocol
inbound ssh configuration fails if you configure authentication-mode password and
authentication-mode none. When you configure SSH protocol successfully for the
user interface, then you cannot configure authentication-mode password and
authentication-mode none any more.
II. Configuring and canceling local RSA key pair
In executing this command, if you have configured RSA host key pair, the system gives
an alarm after using this command and prompts that the existing one will be replaced.
Operation
Huawei Technologies Proprietary
8-3
Chapter 8 SSH Terminal Services
Command
protocol inbound { all | ssh | telnet }