Ssh Configuration Example -Public Key Authentication; Configuration - Avaya VSP 4000 Technical Configuration Manual

avaya.com
6.2 SSH Configuration Example –Public Key
Authentication
6.2.1

Configuration

Using Public Key Authentication is more involved than using SSH password authentication. On the
Client, a set of keys (i.e. public/private) must be generated. The client's public key must then be
transferred to the switch using SCP, SFTP, ftp, or tftp. Note that if SSH secure mode is enabled, ftp and
tftp will be disabled by default, but, you have to choice to re-enable both or either of these features again.
Putty will be used as the SSH Client while Puttygen will be used to generate the DSA key pairs. We will
use the DSA key names of dsa_key_rwa and vsppriv.ppk for the public and private key names. The DSA
public key generated by Puttygen must be transferred to the VSP switch using the naming convention
shown in table 10 above.
Step 1: Enable the SSH boot flag
VSPswitch:1(config)#boot config flags sshd
VSPswitch:1(config)#save config
Step 2: Enable SSH globally
VSPswitch:1(config)#ssh
Step 3: Enable SSH secure mode
VSPswitch:1(config)#ssh secure
Securely enable SSH; set boot flags of telnet/rlogin/ftp/tftp/snmp daemon to false,
continue? (y/n) ? y
Avaya Inc. – External Distribution
86
March 2015