Huawei AR2200 Series Configuration Manual page 111

Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
Step 4 Run:
rsa local-key-pair create
A local RSA key pair is generated.
Step 5 Run:
ssh user user-name authentication-type { password | rsa | password-rsa | all }
The authentication mode for SSH users is configured.
Perform the following as required:
l Authenticate the SSH user through the password.
l Authenticate the SSH user through RSA.
1.
2.
3.
4.
5.
Issue 02 (2011-10-15)
NOTE
l Before performing the other SSH configurations, you must configure the rsa local-key-pair create
command to generate a local key pair.
l After generating the local key pair,you can perform the display rsa local-key-pair public command
to view the public key in the local key pair.
– Run:
ssh user user-name authentication-type password
The password authentication is configured for the SSH user.
Run:
ssh user user-name authentication-type rsa
The RSA authentication is configured for the SSH user.
Run:
rsa peer-public-key key-name
The public key view is displayed.
Run:
public-key-code begin
The public key editing view is displayed.
Run:
hex-data
The public key is edited.
NOTE
l In the public key view, only hexadecimal strings complying with the public key format can be
typed in. Each string is randomly generated on an SSH client. For detailed operations, see manuals
for SSH client software.
l After the public key editing view is displayed, the RSA public key generated on the client can
be sent to the server. Copy the RSA public key to the router that serves as the SSH server.
Run:
public-key-code end
Quit the public key editing view.
l If the specified hex-data is invalid, the public key cannot be generated after the peer-
public-key end command is run.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Managing File System
100