Huawei AR1200 Series User Configuration Manual page 100

Huawei AR1200 Series Enterprise Routers
Configuration Guide - Basic Configuration
Do as follows on the router that functions as an SSH server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
aaa
The AAA view is displayed.
Step 3 Run:
local-user user-name password { simple | cipher } password
Name and password of the local user are created.
Step 4 Run:
quit
Quit the AAA view.
Step 5 Run:
rsa local-key-pair create
A local RSA key pair is generated.
Step 6 Run:
ssh user user-name authentication-type { password | rsa | password-rsa | all }
The authentication mode for SSH users is configured.
Perform the following as required:
l Authenticate the SSH user through the password.
l Authenticate the SSH user through RSA.
1.
Issue 04 (2012-05-15)
authentication mode, configure both the server and the client to generate local RSA key
pairs.
NOTE
Password-rsa authentication requires success of both password authentication and RSA authentication. The
all authentication mode requires success of either password authentication or RSA authentication.
NOTE
l Before performing the other SSH configurations, you must configure the rsa local-key-pair create
command to generate a local key pair.
l After generating the local key pair,you can perform the display rsa local-key-pair public command
to view the public key in the local key pair.
– Run:
ssh user user-name authentication-type password
The password authentication is configured for the SSH user.
Run:
ssh user user-name authentication-type rsa
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 Configuring User Login
88