Configuring An Ssh User - HP MSR Series Configuration Manual

You can enter the content of a client's host public key or import the client's host public key from the
public key file. Hewlett Packard Enterprise recommends that you import the client's host public key.
Entering a client's host public key
Before you enter the client's host public key, you must use the display public-key local public
command on the client to obtain the client's host public key.
To enter a client's host public key:
Step
1. Enter system view.
2. Enter public key view.
3. Configure a client's host
public key.
4. Return to system view.
Importing a client's host public key from the public key file
Before you import the host public key, upload the client's public key file (in binary) to the server, for
example, through FTP or TFTP. During the import process, the server automatically converts the
host public key in the public key file to a string in PKCS format.
To import a client's host public key from the public key file:
Step
1. Enter system view.
2. Import a client's public key
from the public key file.

Configuring an SSH user

Configure an SSH user and a local user depending on the authentication method.
•
If the authentication method is publickey, you must create an SSH user and a local user on the
SSH server. The two users must have the same username, so that the SSH user can be
assigned the correct working directory and user role.
•
If the authentication method is password, you must perform one of the following tasks:
For local authentication, configure a local user on the SSH server.
For remote authentication, configure an SSH user on a remote authentication server, for
example, a RADIUS server.
You do not need to create an SSH user by using the ssh user command. However, if you want
to display all SSH users, including the password-only SSH users, for centralized management,
you can use this command to create them. If such an SSH user has been created, make sure
you have specified the correct service type and authentication method.
Command
system-view
public-key peer keyname
Enter the content of the client's
host public key
peer-public-key end
Command
system-view
public-key peer keyname import sshkey filename
397
Remarks
N/A
N/A
The host public key must be in the
DER encoding format without
being converted.
When you enter the content of a
client's host public key, you can
use spaces and carriage returns
between characters. When you
save the host public key, spaces
and carriage returns are removed
automatically.
For more information, see
"Managing public keys."
N/A