Huawei netengine80e Configuration Manual page 206

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations
...................................++++++++
......++++++++
Step 2 Create an SSH user on the server.
# Configure the VTY user interface.
[SSH Server] user-interface vty 0 4
[SSH Server-ui-vty0-4] authentication-mode aaa
[SSH Server-ui-vty0-4] protocol inbound ssh
[SSH Server-ui-vty0-4] quit
l Create SSH user Client001.
l Create SSH user Client002.
Step 3 Configure the RSA public key on the server.
# Generate a local key pair on the client.
<HUAWEI> system-view
[HUAWEI] sysname client002
[client002] rsa local-key-pair create
# View the RSA public key generated on the client.
[client002] display rsa local-key-pair public
=====================================================
Time of Key pair created: 16:38:51
Key name: client002_Host
Key type: RSA encryption Key
=====================================================
Key code:
3047
0240
0203
Host public key for PEM format code:
---- BEGIN SSH2 PUBLIC KEY ----
AAAAB3NzaC1yc2EAAAADAQABAAAAQQC/815LxhvXhvkHtd59Z3DD5f0XqyA8j8u7
yP3y98tnTlGehBkPa5eo6pH8S7nhiDZedL/VTGh3Z6ica0Mdfj4b
---- END SSH2 PUBLIC KEY ----
Public key code for pasting into OpenSSH authorized_keys file :
Issue 02 (2011-09-10)
NOTE
The SSH user can be authenticated in four modes: password, RSA, password-rsa, and all.
l When the SSH adopts the password or password-rsa authentication mode, configure a local user with
the same name.
l When the SSH user adopts the RSA, password-rsa, or all authentication modes, the server should save
the RSA public key for the SSH client.
# Configure the password authentication for the SSH user Client001.
[SSH Server] ssh user client001
[SSH Server] ssh user client001 authentication-type password
# Configure the password of the SSH user Client001 to huawei.
[SSH Server] aaa
[SSH Server-aaa] local-user client001 password cipher huawei
[SSH Server-aaa] local-user client001 service-type ssh
[SSH Server-aaa] quit
# Configure the RSA authentication for the SSH user Client002.
[SSH Server] ssh user client002
[SSH Server] ssh user client002 authentication-type rsa
BFF35E4B C61BD786 F907B5DE 7D6770C3 E5FD17AB
203C8FCB BBC8FDF2 F7CB674E 519E8419 0F6B97A8
EA91FC4B B9E18836 5E74BFD5 4C687767 A89C6B43
1D7E3E1B
010001
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2007/5/25
8 Accessing Another Device
191