H3C S3600 Series Operation Manual page 25
Ssh terminal service, ethernet switches
Hide thumbs
Also See for S3600 Series:
- Command manual (1277 pages) ,
- Operation manual (966 pages) ,
- Installation manual (98 pages)
Table of Contents
Advertisement
Operation Manual – SSH Terminal Service
H3C S3600 Series Ethernet Switches-Release 1510
RSA public key authentication
# Set AAA authentication on the user interfaces.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Set the user interfaces to support SSH.
[H3C-ui-vty0-4] protocol inbound ssh
# Set the command level for the login users to 3.
[H3C-ui-vty0-4] user privilege level 3
[H3C-ui-vty0-4] quit
# Set login protocol to SSH and authentication type to RSA for user client001.
[H3C] ssh user client001 authentication-type rsa
At this time, the client supporting SSH2.0 will generate a random RSA key pair,
including public key and private key. You need to add the RSA public key, a
hexadecimal character string encoded by the SSHKEY.EXE software in accordance
with the public key cryptography standards (PKCS), to the rsa peer-public-key on the
specified SSH server in the following way.
# Configure the client public key on the server, with a key name of Switch001.
[H3C] rsa peer-public-key Switch001
[H3C-rsa-public-key] public-key-code begin
[H3C-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463
[H3C-rsa-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913
[H3C-rsa-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4
[H3C-rsa-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC
[H3C-rsa-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16
[H3C-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125
[H3C-rsa-key-code] public-key-code end
[H3C-rsa-public-key] peer-public-key end
or
[H3C] rsa peer-public-key Switch001 import sshkey Switch001
# Specify a public key of Switch001 for user client001.
[H3C] ssh user client001 assign rsa-key Switch001
For the RSA authentication, you not only need to configure the IP address, protocol
type, and protocol version of the SSH server, but also need to specify an RSA private
key file (generated by the client software at random) on the client. After the SSH
connection is established, enter the username as prompted to go into the configuration
interface of the switch.
1-24
Chapter 1 SSH Terminal Service
Advertisement
Table of Contents
