Huawei Quidway S5600 Series Operation Manual page 859

Operation Manual - SSH Terminal Services
Quidway S5600 Series Ethernet Switches-Release 1510
Caution:
When SSH protocol is specified, to ensure a successful login, you must configure
the AAA authentication using the authentication-mode scheme command.
The
authentication-mode password or authentication-mode none. When you
configure SSH protocol successfully for the user interface, then you cannot
configure authentication-mode password or authentication-mode none any
more.
II. Generating or destroying RSA key pairs
This configuration task is used to generate or destroy the server RSA key pair. The
name of the server RSA key pair is in the format of switch name plus _Host, and switch
name plus _Server, Quidway_Host and Quidway_Server for example.
After you input the rsa local-key-pair command, the system prompts you to define the
key length.
In SSHv1.x, the key length is in the range of 512 to 2,048 (bits).
In SSHv2.0, the key length is in the range of 1024 to 2048 (bits). To make SSH 1.x
compatible, 512- to 2,048-bit keys are allowed on clients, but the length of server
keys must be more than 1,024 bits. Otherwise, clients cannot be authenticated.
Table 1-3 Generate or destroy RSA key pairs
Enter system view
Generate a local RSA key pair
Destroy a local RSA key pair
protocol inbound
Operation
Huawei Technologies Proprietary
Chapter 1 SSH Terminal Services
ssh configuration
Command
system-view
rsa local-key-pair create
rsa local-key-pair destroy
1-5
fails if you configured
Description
—
Required
Optional