Huawei AR2200 Series Configuration Manual page 176

Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
l
Procedure
Step 1 Generate a local key pair on the SSH server.
<Huawei> system-view
[Huawei] sysname SSH Server
[SSH Server] rsa local-key-pair create
The key name will be: Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]: 768
Generating keys...
.........++++++++
......................++++++++
......................+++++++++
.....+++++++++
Step 2 Create SSH users on the server.
# Configure a VTY user interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
l Create an SSH user named Client001.
l Create an SSH user named Client002.
Step 3 Configure the RSA public key on the server.
# Generate a local key pair for Client002.
<Huawei> system-view
[Huawei] sysname client002
[client002] rsa local-key-pair create
# Check the RSA public key of the client.
[client002] display rsa local-key-pair public
=====================================================
Time of Key pair created: 2007-12-29 16:19:59+08:00
Key name: Host
Key type: RSA encryption Key
=====================================================
Key code:
3047
Issue 02 (2011-10-15)
Name of the SSH server
It will take a few minutes.
# Create an SSH user named Client001, configure password authentication for the user, and
set the password to huawei.
[SSH Server] aaa
[SSH Server-aaa] local-user client001 password cipher huawei
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] local-user client001 ftp-directory flash:
[SSH Server-aaa] quit
# Create an SSH user named Client002, set the password to huawei, and configure RSA
authentication for the user.
[SSH Server] aaa
[SSH Server-aaa] local-user client002 password cipher huawei
[SSH Server-aaa] local-user client002 service-type ssh
[SSH Server-aaa] local-user client002 ftp-directory flash:
[SSH Server-aaa] quit
[SSH Server] ssh user client002 authentication-type rsa
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 Accessing Another Device
165