3Com 7757 Configuration Manual page 782

782 C 71: SSH T
HAPTER ERMINAL
c
n
n
S
ERVICES
[SW7750-Vlan-interface1] ip address 10.1.1.3 255.255.255.0
[SW7750-Vlan-interface1] quit
CAUTION: Generating server RSA key pair is a must for SSH login.
# Generate an RSA key pair.
[SW7750] rsa local-key-pair create
# Set the authentication mode for the user interfaces to AAA.
[SW7750] user-interface vty 0 4
[SW7750-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[SW7750-ui-vty0-4] protocol inbound ssh
# Set the user command privilege level to 3.
[SW7750-ui-vty0-4] user privilege level 3
[SW7750-ui-vty0-4] quit
# Create a user named client001, specifying to use RSA authentication.
[SW7750] ssh user client001 authentication-type rsa
Before performing the following tasks, you must generate an RSA key pair on the
client, and configure the public key on the SSH server. For details, refer to "SSH
Client Configuration" on page 778.
# Configure the client public key on the server, and name the public key
Switch001.
[SW7750] rsa peer-public-key Switch001
RSA public key view: return to System View with "peer-public-key end".
[SW7750-rsa-public-key] public-key-code begin
RSA key code view: return to last view with "public-key-code end".
[SW7750-rsa-key-code] 3047
[SW7750-rsa-key-code] 0240
[SW7750-rsa-key-code] C8969B5A 132440F4 0BDB4E5E 40308747 804F608B
[SW7750-rsa-key-code] 349EBD6A B0C75CDF 8B84DBE7 D5E2C4F8 AED72834
[SW7750-rsa-key-code] 74D3404A 0B14363D D709CC63 68C8CE00 57C0EE6B
[SW7750-rsa-key-code] 074C0CA9
[SW7750-rsa-key-code] 0203
[SW7750-rsa-key-code] 010001
[SW7750-rsa-key-code] public-key-code end
[SW7750-rsa-public-key] peer-public-key end
[SW7750]
# Assign public key Switch001 to user client001.
[SW7750] ssh user client001 assign rsa-key Switch001
If the first-time authentication is not configured, it is required to manually
configure the RSA host public key of the server on the client.
# Display the RSA pubic key of the server (only the host public key contents are
displayed).