Huawei netengine80e Configuration Manual page 137

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
Do as follows on the router that functions as an SSH server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ssh user
1.
2.
Step 3 Run:
rsa local-key-pair create
A local RSA key pair is generated.
Step 4 Run:
ssh user
The authentication mode for SSH users is configured.
Perform the following as required:
l Authenticate the SSH user through the password.
l Authenticate the SSH user through RSA.
1.
Issue 02 (2011-09-10)
user-name
Run:
aaa
The AAA view is displayed.
Run:
local-user user-name password { simple | cipher } password
Name and password of the local user are created.
NOTE
l Before performing the other SSH configurations, you must configure the
command to generate a local key pair.
l After generating the local key pair,you can perform the
to view the public key in the local key pair.
user-name authentication-type { password | rsa | password-rsa | all }
– Run:
ssh user user-name authentication-type password
The password authentication is configured for the SSH user.
– Run:
ssh authentication-type default password
The default password authentication is configured for the SSH user.
For the local authentication or HWTACACS authentication, if the number of SSH users
is small, you can adopt the former command; if the number of SSH users is large, adopt
the later command to simplify the configuration.
Run:
ssh user user-name authentication-type rsa
The RSA authentication is configured for the SSH user.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Managing File System
rsa local-key-pair create
display rsa local-key-pair public command
122