Huawei AR1200 Series User Configuration Manual page 101

Huawei AR1200 Series Enterprise Routers
Configuration Guide - Basic Configuration
2.
3.
4.
5.
6.
7.
Step 7 (Optional) Configuring the Basic Authentication Information for SSH Users
1.
2.
3.
Issue 04 (2012-05-15)
The RSA authentication is configured for the SSH user.
Run:
rsa peer-public-key key-name
The public key view is displayed.
Run:
public-key-code begin
The public key editing view is displayed.
Run:
hex-data
The public key is edited.
NOTE
l In the public key view, only hexadecimal strings complying with the public key format can be
typed in. Each string is randomly generated on an SSH client. For detailed operations, see manuals
for SSH client software.
l After the public key editing view is displayed, the RSA public key generated on the client can
be sent to the server. Copy the RSA public key to the router that serves as the SSH server.
Run:
public-key-code end
Quit the public key editing view.
l If the specified hex-data is invalid, the public key cannot be generated after the peer-
public-key end command is run.
l If the specified key-name is deleted in other views, the system prompts that the key does
not exist after the peer-public-key end command is run and the system view is
displayed.
Run:
peer-public-key end
Return to the system view from the public key view.
Run:
ssh user user-name assign rsa-key key-name
The public key is assigned to the SSH user.
Run:
ssh server rekey-interval interval
The interval for updating the server key pair is configured.
By default, the interval for updating the key pair of the SSH server is 0 that indicates no
updating.
Run:
ssh server auth-timeout timeout_interval
The timeout period of the SSH authentication is set.
By default, the timeout period is 60 seconds.
Run:
ssh server authentication-retries auth-times
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 Configuring User Login
89