Enabling And Disabling First-Time Authentication; Establishing A Connection To An Stelnet Server - HP 12500 Series Configuration Manual

Enabling and disabling first-time authentication

When the device connects to the SSH server as an SSH client, you can configure whether the device
supports first-time authentication.
If first-time authentication is not supported, a client not configured with the server host public key
•
refuses to access the server. To enable the client to access the server, you must configure the server
host public key locally and specify the public key name for authentication on the client in advance.
• If first-time authentication is supported, when a client not configured with the server host public key
accesses the server for the first time, the user can continue accessing the server, and save the host
public key on the client. When accessing the server again, the client will use the saved server host
public key to authenticate the server. In a secure network, first-time authentication can simplify client
configuration, but it is not reliable.
Enabling first-time authentication
Step
1. Enter system view.
2. Enable first-time
authentication.
Disabling first-time authentication
Step
1. Enter system view.
2. Disable first-time
authentication.
3. Configure the server host
public key.
4. Specify the host public key
name of the server.

Establishing a connection to an Stelnet server

You can start the Stelnet client to establish a connect to an Stelnet server, and specify the public key
algorithm, the preferred encryption algorithm, the preferred HMAC algorithm, and the preferred key
exchange algorithm.
To establish a connection to an Stelnet server:
Command
system-view
ssh client first-time enable
Command
system-view
undo ssh client first-time
See "Configuring a client's host
public key"
ssh client authentication server
server assign publickey keyname
217
Remarks
N/A
Optional.
Enabled by default.
Remarks
N/A
Enabled by default.
The method for configuring the
server host public key on the client
is similar to that for configuring
client public key on the server.
N/A