Huawei Quidway S3500 Series Operation Manual page 645

Operation Manual - System Management
Quidway S3500 Series Ethernet Switches
The server key pair is created dynamically by SSH server. The maximum bit range of
both key pairs is 2048 bits and the minimum is 512.
Please perform the following configurations in system view.
Table 8-2 Configuring and canceling local RSA key pair
Configure local RSA key pair
Cancel local RSA key pair
Caution:
For a successful SSH login, you must configure and generate the local RSA key pairs.
To generate local key pairs, you just need to execute the command once, with no
further action required even after the system is rebooted.
III. Configuring authentication type
For a new user, you must specify authentication type. Otherwise, he/she cannot access
the switch.
Please perform the following configurations in system view.
Table 8-3 Configuring authentication type
Configure authentication type
Remove
setting
If the configuration is RSA authentication type, then the RSA public key of client user
must be configured on the switch, that is to perform the 7 and 8 serial number marked
configuration.
By default, no authentication type is specified for a new user, so he/she cannot access
the switch.
IV. Defining update interval of server key
Please perform the following configurations in system view.
Operation
Operation
authentication type
Huawei Technologies Proprietary
Chapter 8 SSH Terminal Services
Command
rsa local-key-pair create
rsa local-key-pair destroy
Command
ssh user username
{ password | rsa | all }
undo ssh user username authentication-type
8-4
authentication-type