Ssh2 - H3C MSR 20-20 Command Reference Manual

2196 C 142: SSH2.0 C
HAPTER
Related command:
Example

ssh2

Syntax
View
Parameter
C
ONFIGURATION OMMANDS
For a publickey authentication user, you must configure the username and the
■
public key on the device. For a password authentication user, you can configure
the account information on either the device or the remote authentication
server such as a RADIUS server.
If you use the ssh user command to configure a public key for a user who has
■
already had a public key, the new one overwrites the old one.
The new public key takes effect when the user logs in next time.
■
If an SFTP user has been assigned a public key, it is necessary to set a working
■
folder for the user.
The working folder of an SFTP user is subject to the user authentication
■
method. For a user using only password authentication, the working folder is
the AAA authorized one. For a user using only publickey authentication or
using both the publickey and password authentication methods, the working
folder is the one set by using the ssh user command.
display ssh user-information.
# Create an SSH user named user1, and specify the service type as sftp, the
authentication method as publickey, the work folder of the SFTP server as flash,
and assign a public key named key1 to the user.
<Sysname> system-view
[Sysname] ssh user user1 service-type sftp athentication-type public
key assign publickey key1 work-directory flash:
ssh2 server [ port-number ] [ identity-key { dsa | rsa } | prefer-ctos-cipher { 3des |
aes128 | des } | prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } | prefer-kex
{ dh-group-exchange | dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
User view
server: IPv4 address or name of the server, a string of 1 to 20 characters.
port-number: Port number of the server, in the range 0 to 65535. The default is
22.
identity-key: Specifies the algorithm for publickey authentication, either dsa or
rsa. The default is dsa.
prefer-ctos-cipher: Preferred encryption algorithm from client to server, defaulted
to aes128.
3des: Encryption algorithm 3des-cbc.
■
aes128: Encryption algorithm aes128-cbc
■
des: Encryption algorithm des-cbc.
■