Huawei Quidway S5600 Series Operation Manual page 860

Operation Manual - SSH Terminal Services
Quidway S5600 Series Ethernet Switches-Release 1510
Caution:
For a successful SSH login, you must generate a local RSA key pair first.
You just need to execute the command once, with no further action required even
after the system is rebooted.
If you use this command to generate an RSA key provided an old one exits, the
system will prompt you to replace the previous one or not.
Because multiple devices form a fabric, you need to manually configure the rsa
local-key-pair create command to ensure all devices in the fabric have the same
RSA local key pair.
Note:
With the rsa local-key-pair create command configured:
When the switch works in the SSHv1.x compatible mode, if you execute the display
rsa local-key-pair public command, two public keys are displayed. They are
Quidway_Host and Quidway_Server.
When the switch works in the SSHv2.0 mode, if you execute the display rsa
local-key-pair public command, only one public key is displayed. It is Quidway_
Host.
III. Configuring authentication type
New users must specify authentication type. Otherwise, they cannot access the switch.
Table 1-4 Configure authentication type
Operation
Enter system view
Specify
authentication
SSH users
Configure authentication
type for SSH users
system-view
ssh authentication-type
a default
default { password | rsa
type for
| password-publickey |
all }
ssh
authentication-type
{
password-publickey
rsa| all }
Huawei Technologies Proprietary
1-6
Chapter 1 SSH Terminal Services
Command
—
Optional
By default, there is no
default
type for SSH users
Optional;
user username
By default, the system
does not specify available
password |
authentication types for
|
SSH users, that is, they
can not access the switch.
Description
authentication