Using Ssh With Password Authentication; Using Ssh With Public Key Authentication - Lenovo CN4093 Application Manual

Using SSH with Password Authentication

Using SSH with Public Key Authentication

1. Enable SSH:
2. Import the public key file using SFTP or TFTP for the admin user account:
© Copyright Lenovo 2015
The following SSH clients have been tested:
OpenSSH_5.1p1 Debian-3ubuntu1

 SecureCRT 5.0 (Van Dyke Technologies, Inc.)
 Putty beta 0.60
Note: The Lenovo N/OS implementation of SSH supports version 2.0 and supports
SSH client version 2.0.
By default, the SSH feature is enabled. For information about enabling and using
SSH for switch access, see
Once the IP parameters are configured and the SSH service is enabled, you can
access the command line interface using an SSH connection.
To establish an SSH connection with the switch, run the SSH program on your
workstation by issuing the SSH command, followed by the switch IPv4 or IPv6
address:
ssh <switch IP address>
You will then be prompted to enter a password as explained
on page 40.
SSH can also be used for switch authentication based on asymmetric cryptography.
Public encryption keys can be uploaded on the switch and used to authenticate
incoming login attempts based on the clients' private encryption key pairs. After a
predefined number of failed public key login attempts, the switch reverts to
password-based authentication.
To set up public key authentication:
CN 4093(config)# ssh enable
CN 4093(config)# copy {sftp|tftp} public-key
Port type ["DATA"/"MGT"]: mgt
Address or name of remote host: 9.43.101.151
Source file name: 11.key
Username of the public key: admin
Confirm download operation (y/n) ? y
Note: When prompted to input a username, a valid user account name must be
entered. If no username is entered, the key is stored on the switch, and can be
assigned to a user account later.
Note: A user account can have up to 100 public keys set up on the switch.
"Secure Shell and Secure Copy" on page 74.
"Switch Login Levels"
Chapter 1: Switch Administration
33