H3C S3600 Series Operation Manual page 7

Operation Manual – SSH Terminal Service
H3C S3600 Series Ethernet Switches-Release 1510
Caution:
For a successful SSH login, you must first generate the RSA key pairs of the server.
You just need to execute the rsa local-key-pair create command once, and need
not execute the command again after the system is rebooted.
If you re-execute the rsa local-key-pair create command, the system will ask
whether you want to replace the original key pairs with new ones.
For a fabric made up of multiple devices, you need to execute the rsa
local-key-pair create command on the management device to ensure that all
devices in the fabric have the same local RSA key pairs.
Note:
After the rsa local-key-pair create command is executed, you can execute the
display rsa local-key-pair public command, which will display:
Two public keys (in H3C_Host and H3C_Server) if the switch works in
SSH1.x-compatible mode.
Only one public key (in H3C_Host) if the switch works in SSH2.0 mode.
III. Create an SSH user
Table 1-4 Create an SSH user
Enter system view
Create an SSH user
For an SSH user created by using this command, if you do not specify an
authentication type by using the ssh user authentication-type command for this user,
this SSH user adopts the default authentication type. On the other hand, if the default
authentication type is not specified, you need to specify an authentication type for this
SSH user.
IV. Configuring authentication type for a user
For a new user, you must specify the authentication type. Otherwise, the user cannot
access the switch.
Operation
system-view
ssh user username
Chapter 1 SSH Terminal Service
Command
1-6
Description
—
Required