H3C S3100-52P Operation Manual page 6

Operation Manual – SSH Terminal Service
H3C S3100-52P Ethernet Switch
Caution:
If you have configured a user interface to support SSH protocol, to ensure a
successful login to the user interface, you must configure AAA authentication for the
user interface by using the authentication-mode scheme command.
For a user interface, if you have executed the authentication-mode password or
authentication-mode none command, the protocol inbound ssh command
cannot be executed; if you have executed the protocol inbound ssh command,
neither of the authentication-mode password and authentication-mode none
commands can be executed.
II. Generating or destroying local RSA key pair
This configuration task is used to generate or destroy an RSA key pair on the server,
which is named in the format of switch name plus "_Host", for example, H3C_host.
After you issue the rsa local-key-pair create command, the system prompts you to
input a key length.
In SSH2.0, the key length is in the range of 512 to 2,048 (bits).
Table 1-3 Generate or destroy local RSA key pair
Enter system view
Generate local RSA key pair
Destroy local RSA key pair
Caution:
For a successful SSH login, you must first generate the RSA key pair of the server.
You just need to execute the rsa local-key-pair create command once, and need
not execute the command again after the system is rebooted.
If you re-execute the rsa local-key-pair create command, the system will ask
whether you want to replace the original key pair with a new one.
Operation
Chapter 1 SSH Terminal Service
Command
system-view
rsa local-key-pair create
rsa local-key-pair destroy
1-5
Description
—
Required
Optional