Creating An Ssh User And Specifying An Authentication Type - 3Com 4200G 12-Port Configuration Manual

To do...
Generate key
pair(s)
The command for generating a key pair can survive a reboot. You only need to configure it once.
It takes more time to encrypt and decrypt data with a longer key, which, however, ensures higher
security. Therefore, specify the length of the key pair accordingly.
Some third-party software, for example, WinSCP, requires that the modulo of a public key must be
greater than or equal to 768. Therefore, a local key pair of more than 768 bits is recommended.
Destroying key pairs
The RSA or DSA keys may be exposed, and you may want to destroy the keys and generate new ones.
Follow these steps to destroy key pairs:
To do...
Enter system view
Destroy key
pair(s)

Creating an SSH User and Specifying an Authentication Type

This task is to create an SSH user and specify an authentication type. Specifying an authentication type
for a new user is a must to get the user login.
An SSH user is represented as a set of user attributes on the SSH server. This set is uniquely identified
with the SSH username. When a user logs in to the SSH server from the SSH client, a username is
required so that the server can looks up the database for matching the username. If a match is found, it
authenticates the user using the authentication mode specified in the attribute set. If not, it tears down
the connection.
To prevent illegal users from logging in to the device, SSH supports the authentication modes of
password, publickey, and password-publickey.
Password authentication
Generate an RSA
key pairs
Generate a DSA
key pair
system-view
Destroy the RSA
public-key local destroy rsa
key pairs
Destroy the DSA
public-key local destroy dsa
key pair
Use the command...
public-key local create rsa
public-key local create dsa
Use the command...
1-9
Remarks
Required
By default, no key
pairs are generated.
Remarks
—
Optional