Huawei Quidway S6500 Series Operation Manual page 615

Operation Manual - System Management
Quidway S6500 Series Ethernet Switches
Setting system protocol and link maximum
Configuring and deleting local RSA key pair
Configuring authentication type
Defining update interval of server key
Defining SSH authentication timeout value
Defining SSH authentication retry value
Entering public key view and editing public key
Associating public key with SSH user
I. Setting system protocol
You must specify SSH protocol for the system before enabling SSH.
Please perform the following configuration in user interface view.
Table 8-1 Setting system protocols and link maximum
Set system protocol and link maximum
By default, the system supports Telnet and SSH protocols,
Caution:
If SSH protocol is specified, to ensure a successful login, you must configure the AAA
authentication using the authentication-mode scheme command. The protocol
inbound ssh configuration fails if you configure authentication-mode password and
authentication-mode none. When you configure SSH protocol successfully for the
user interface, then you cannot configure authentication-mode password and
authentication-mode none any more.
II. Configuring and canceling local RSA key pair
In executing this command, if you have configured RSA host key pair, the system gives
an alarm after using this command and prompts that the existing one will be replaced.
The server key pair is created dynamically by SSH server. The maximum bit range of
both key pairs is 2048 bits and the minimum is 512.
Please perform the following configurations in system view.
Operation
Huawei Technologies Proprietary
8-3
Chapter 8 SSH Terminal Services
Command
protocol inbound { all | ssh | telnet }