D-Link DXS-3600 Series Cli Reference Manual page 1198

Layer 2/3 managed 10gigabit
Hide thumbs Also See for DXS-3600 Series:
Table of Contents

Advertisement

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
no ssh user NAME authentication-method
Parameters
user NAME
password
publickey URL
hostbased URL
host-name HOSTNAME
IP-ADDRESS
IPV6-ADDRESS
Default
The default authentication method for a user is password.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The administrator can use this command to specify authentication method for a user. The user name
must be a user created by the username command. By default, the authentication method is password.
The system will prompt the user to input the password.
To authenticate a user via SSH public key authentication, copy the user's public key file to file system.
When the user tries to login to the switch via an SSH client (using the SSH public key method), the SSH
client will automatically transmit the public key and signature with the private key to the switch. If both the
public key and signature are correct, the user is authenticated and login into the switch is allowed.
To authenticate a user via SSH public key authentication via SSH public key or the host-based
method, the user's public key file or client's host key file must be specified. Both key files have
the same format. A key file can contain multiple keys and each key is defined by one line. The
maximum length of one line is 8 Kb.
Each key consists of the following space-separated fields: keytype, base64-encoded key, and
comment. The keytype and base64-encoded key fields are mandatory and the comment field is
optional. The keytype field can be either be ssh-dss or ssh-rsa.
Example
This example shows how to configure the authentication method to public key for user user1.
Switch# configure terminal
Switch(config)# ssh user tom authentication-method publickey c:/user1.pub
Specifies the username to configure the authentication type. The user
must be an existing local account. The length of the username is
limited to a maximum of 32 characters.
Specifies to use the password authentication method for this user
account. This is the default authentication method.
Specifies to use the public key authentication method for this user
account. Enter the URL of a local file to be used as the public key of
this user.
Specifies to use the host-based authentication method for this user
account. Enter the URL of a local file to be used as client's host key.
Specifies the allowed host name for host-based authentication. During
authentication phase, the client's hostname will be checked. The range
is from 1 to 255.
(Optional) Specifies whether to additionally check the IP address of the
client for host-based authentication. If not specified, only the host
name will be checked.
(Optional) Specifies whether to additionally check the IPv6 address of
the client for host-based authentication. If not specified, only the host
name will be checked.
1193

Advertisement

Table of Contents
loading

Table of Contents