Steps For Configuring And Using Ssh; For Switch And Client Authentication - HP ProCurve 6200yl Series Access Security Manual

Configuring Secure Shell (SSH)
Steps for Configuring and Using SSH for Switch and Client Authentication
Table 7-1. SSH Options
Switch Primary SSH
Access Authentication
Level
Operator ssh login rsa
(Login)
ssh login Local
Level
ssh login TACACS
ssh login RADIUS
Manager ssh enable local
(Enable)
ssh enable tacacs
Level
ssh enable radius
1
For ssh login public-key, the switch uses client public-key authentication instead of the switch password options for
primary authentication.
7-6

Steps for Configuring and Using SSH

for Switch and Client Authentication

For two-way authentication between the switch and an SSH client, you must
use the login (Operator) level.
Authenticate
Switch Public Key
to SSH Clients?
Yes
Yes
Yes
Yes
Yes
Yes
Yes
The general steps for configuring SSH include:
A. Client Preparation
1. Install an SSH client application on a management station you want
to use for access to the switch. (Refer to the documentation provided
with your SSH client application.)
2. Optional—If you want the switch to authenticate a client public-key
on the client:
a. Either generate a public/private key pair on the client computer
(if your client application allows) or import a client key pair that
you have generated using another SSH application.
b. Copy the client public key into an ASCII file on a TFTP server
accessible to the switch and download the client public key file to
the switch. (The client public key file can hold up to 10 client keys.)
This topic is covered under "To Create a Client-Public-Key Text
File" on page 7-23.
Authenticate Primary Switch
Client Public Key Password
to the Switch? Authentication
1
Yes
No
No
No
No
No
No
Secondary Switch
Password
Authentication
1
No local or none
Yes local or none
Yes local or none
Yes local or none
Yes local or none
Yes local or none
Yes local or none