Configuring User Lines For Ssh Login; Configuring A Client's Host Public Key - HPE FlexNetwork 5510 HI Series Security Configuration Manual

Configuring user lines for SSH login

Depending on the SSH application, an SSH client can be an Stelnet client, SFTP client, SCP client,
or NETCONF-over-SSH client.
Only Stelnet and NETCONF-over-SSH clients require the user line configuration. The user line
configuration takes effect on the clients at the next login.
To configure the user lines for Stelnet and NETCONF-over-SSH clients:
Step
1. Enter system view.
2. Enter VTY user line view.
3. Set the login authentication
mode to scheme.

Configuring a client's host public key

In publickey authentication, the server compares the SSH username and client's host public key that
it receives from the client with the locally saved SSH username and the client's host public key. If
they are the same, the server checks the digital signature that the client sends. The client generates
the digital signature by using the private key that is associated with the client's host public key.
For publickey authentication, password-publickey authentication, or any authentication, you must
perform the following tasks:
1. Configure the client's DSA, ECDSA, or RSA host public key on the server.
As a best practice, configure no more than 20 SSH client host public keys on an SSH server.
2. Specify the associated host private key on the client to generate the digital signature.
If the device acts as an SSH client, specify the public key algorithm on the client. The algorithm
determines the associated host private key for generating the digital signature.
You can enter the content of a client's host public key or import the client's host public key from the
public key file. As a best practice, import the client's host public key.
Entering a client's host public key
Before you enter the client's host public key, you must use the display public-key local public
command on the client to obtain the client's host public key.
To enter a client's host public key:
Step
1. Enter system view.
2. Enter public key view.
3. Configure a client's host
public key.
Command
system-view
line vty number [ ending-number ]
authentication-mode scheme
Command
system-view
public-key peer keyname
Enter the content of the host
public key
334
Remarks
N/A
N/A
By default, the authentication
mode is password.
For more information about this
command, see Fundamentals
Command Reference.
Remarks
N/A
N/A
The host public key must be in the
DER encoding format without
being converted.
When you enter the contents for a
host public key, you can use
spaces and carriage returns
between characters. When you
save the host public key, spaces