Huawei Quidway S3900 series Command Manual page 939

Command Manual –SSH Terminal Service
Quidway S3900 Series Ethernet Switches-Release 1510
After you use the command, the system prompts you to define the key length.
In SSHv1.x, the key length is in the range of 512 to 2,048 (bits).
In SSHv2.0, the key length is in the range of 1024 to 2048 (bits). To make SSH 1.x
compatible, 512- to 2,048-bit keys are allowed on clients, but the length of server
keys must be more than 1,024 bits. Otherwise, clients cannot be authenticated.
If you use this command to generate an RSA key provided an old one exists, the
system will prompt you to replace the previous one or not.
Note:
With the rsa local-key-pair create command configured:
When the switch works in the SSHv1.x compatible mode, if you execute the display
rsa local-key-pair public command, two public keys are displayed. They are
Quidway_Host and Quidway_Server.
When the switch works in the SSHv2.0 mode, if you execute the display rsa
local-key-pair public command, only one public key is displayed. It is
Quidway_Host.
For a successful SSH login, you must generate the local RSA key pairs first. You just
need to execute the command once, with no further action required even after the
system is rebooted.
Related command: rsa local-key-pair destroy, display rsa local-key-pair public.
Example
# Generate a local RSA key pair.
<Quidway> system-view
System View: return to User View with Ctrl+Z.
[Quidway] rsa local-key-pair create
The local-key-pair will be created.
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Input the bits in the modulus[default = 1024]:
Generating keys...
........................++++++
.......++++++
.................................++++++++
...++++++++
........Done!
Huawei Technologies Proprietary
1-10
Chapter 1 SSH Terminal Service
Configuration Commands