Optional) Configuring The Basic Authentication Information For Ssh Users - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Basic Configuration
4.
5.
6.
7.
----End
9.3.6 (Optional) Configuring the Basic Authentication Information
for SSH Users
You can configure the interval for updating the server key pair, timeout period of the SSH
authentication, and retry times of the SSH authentication.
Context
Do as follows on the switch that serves as an SSH server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ssh server rekey-interval interval
The interval for updating the server key pair is configured.
Issue 01 (2011-07-15)
The public key editing view is displayed.
Run:
hex-data
The public key is edited.
The public key must be a string of hexadecimal alphanumeric characters. It is automatically
generated by an SSH client. You can run the display rsa local-key-pair public command
to view a generated public key.
Run:
public-key-code end
Quit the public key editing view.
If the specified hex-data is invalid, the public key cannot be generated after the peer-public-
key end command is run; If the specified key-name is deleted in other views, the system
prompts that the key does not exist after the peer-public-key end command is run and the
system view is displayed.
Run:
peer-public-key end
Return to the system view from the public key view.
Run:
ssh user user-name assign rsa-key key-name
The public key is assigned to the SSH user.
NOTE
l After the public key editing view is displayed, the RSA public key generated on the client can be sent
to the server. Copy the RSA public key to the switch that serves as the SSH server.
l Before the peer RSA public key is assigned to the SSH users, the SSH server must be configured and
the peer RSA public key must be the RSA public key of the SSH client.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Telnet and SSH
127