Configuring User Interfaces For Ssh Clients; Configuring A Client Public Key - HP A6600 Configuration Manual

Configuring user interfaces for SSH clients

An SSH client accesses the router through a VTY user interface. Therefore, you must configure the user
interfaces for SSH clients to allow SSH login. The configuration takes effect only for clients that log in
after the configuration.
To configure the protocols for a user interface to support:
To do...
1. Enter system view.
2. Enter user interface view of
one or more user interfaces.
3. Set the login authentication
mode to scheme.
4. Configure the user interfaces
to support SSH login.
CAUTION:
For more information about authentication-mode and protocol inbound , see
•
Command Reference.
If you configure a user interface to support SSH, be sure to configure the corresponding
•
authentication mode with authentication-mode scheme.
For a user interface configured to support SSH, you cannot change the authentication mode. To
•
change the authentication mode, first undo the SSH support configuration.

Configuring a client public key

This configuration task is only necessary for SSH users who are using publickey authentication.
For each SSH user who uses publickey authentication to log in, you must configure the client's DSA or
RSA host public key on the server and configure the client to use the corresponding host private key.
To configure the public key of an SSH client, configure it manually or import it from the public key file:
Configure it manually—Enter or copy the public key to the SSH server. The public key must have
•
not been converted and must be in the DER encoding format.
Import it from the public key file—During the import process, the system automatically converts the
•
public key to a string coded by using the PKCS. Before importing the public key, you must upload
the public key file (in binary) to the server through FTP or TFTP.
NOTE:
HP recommends that you configure a client public key by importing it from a public key file.
•
configure up to 20 client public keys on an SSH server.
•
Command...
system-view
user-interface vty number [
ending-number ]
authentication-mode scheme
protocol inbound { all | ssh }
310
Remarks
—
—
Required.
By default, the authentication
mode is password.
Optional.
All protocols are supported by
default.
Fundamentals