Table of Contents
Advertisement
Use the display public-key local public command to display the public key on the peer device. The
format of the public key displayed in any other way might be incorrect. If the key is not in the correct
format, the system discards the key and displays an error message. If the key is valid, the system
saves the key.
Always import rather than enter the peer host public key if you are not sure that the device supports
the format of the recorded peer host public key.
To enter a peer host public key:
Step
1.
Enter system view.
2.
Specify a name for the peer
host public key and enter
public key view.
3.
Type or copy the key.
4.
Return to system view.
Displaying and maintaining public keys
Execute display commands in any view.
Task
Display local public keys.
Display peer host public keys.
Examples of public key management
Example for entering a peer host public key
Network requirements
As shown in
signature. Before configuring authentication parameters on Device B, configure the public key of
Device A on Device B.
•
Configure Device B to use the asymmetric key algorithm of RSA to authenticate Device A.
•
Manually specify the host public key of Device A on Device B.
Figure 75 Network diagram
Device A
Configuration procedure
1.
Configure Device A:
Command
system-view
public-key peer keyname
N/A
peer-public-key end
Figure
75, to prevent illegal access, Device B authenticates Device A through a digital
Device B
Command
display public-key local { dsa | ecdsa | rsa } public [ name
key-name ]
display public-key peer [ brief | name publickey-name ]
220
Remarks
N/A
By default, no peer host public key
exists.
You can use spaces and carriage
returns, but the system does not save
them.
When you exit public key view, the
system automatically saves the public
key.
Advertisement
Table of Contents
Troubleshooting
