Dell S3048-ON Configuration Manual page 721

Example of Enabling SSH Password Authentication
To view your SSH configuration, use the show ip ssh command from EXEC Privilege mode.
Dell(conf)#ip ssh server enable
Dell(conf)#ip ssh password-authentication enable
Dell# show ip ssh
SSH server
SSH server version
SSH server vrf
SSH server ciphers
ctr,aes256-ctr.
SSH server macs
sha2-256-96.
SSH server kex algorithms : diffie-hellman-group-exchange-sha1,diffie-hellman-group1-
sha1,diffie-hellman-group14-sha1.
Password Authentication
Hostbased Authentication
RSA Authentication
Vty Encryption
Using RSA Authentication of SSH
The following procedure authenticates an SSH client based on an RSA key using RSA authentication. This method uses SSH version 2.
1 On the SSH client (Unix machine), generate an RSA key, as shown in the following example.
2 Copy the public key id_rsa.pub to the Dell Networking system.
3 Disable password authentication if enabled.
CONFIGURATION mode
no ip ssh password-authentication enable
4 Enable RSA authentication in SSH.
CONFIGURATION Mode
ip ssh rsa-authentication enable
5 Install user's public key for RSA authentication in SSH.
EXEC Privilege Mode
ip ssh rsa-authentication my-authorized-keys flash://public_key
Example of Generating RSA Keys
admin@Unix_client#ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/admin/.ssh/id_rsa):
/home/admin/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/admin/.ssh/id_rsa.
Your public key has been saved in /home/admin/.ssh/id_rsa.pub.
Configuring Host-Based SSH Authentication
Authenticate a particular host. This method uses SSH version 2.
To configure host-based authentication, use the following commands.
1 Configure RSA Authentication. Refer to
2 Create shosts by copying the public RSA key to the file shosts in the directory .ssh, and write the IP address of the host to the file.
cp /etc/ssh/ssh_host_rsa_key.pub /.ssh/shosts
: enabled.
: v1 and v2.
: default.
: 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-
: hmac-md5,hmac-md5-96,hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-
: enabled.
: disabled.
: disabled.
HMAC
Using RSA Authentication of
Remote IP
SSH.
Security 721