H3C S3100 8C SI Operation Manual page 698

Operation Manual – SSH
H3C S3100 Series Ethernet Switches
Configure server public
key
Specify the host key name
of the server
III. Establishing the connection between the SSH client and server
The client's method of establishing an SSH connection to the SSH server varies with
authentication types.
Table 1-17 Follow these steps to establish an SSH connection:
To do...
Enter system view
Start the client to
establish a
connection with an
SSH server
Note:
When logging into the SSH server using public key authentication, an SSH client needs
to read its local private key for authentication. As two algorithms (RSA or DSA) are
available, the identity-key keyword must be used to specify one algorithm in order to
get the correct private key.
To do...
Refer to
Public Key of a Client on
the Server
ssh client { server-ip |
server-name } assign
publickey keyname
Use the command...
system-view
ssh2 { host-ip |
host-name } [ port-num ]
[ identity-key { dsa | rsa }
| prefer_kex
{ dh_group1 |
dh_exchange_group } |
prefer_ctos_cipher
{ des | aes128 } |
prefer_stoc_cipher
{ des | aes128 } |
prefer_ctos_hmac
{ sha1 | sha1_96 | md5 |
md5_96 } |
prefer_stoc_hmac
{ sha1 | sha1_96 | md5 |
md5_96 } ] *
Use the command...
Configuring the
—
Required
In this command, you can also
specify the preferred key
exchange algorithm, encryption
algorithms and HMAC algorithms
between the server and client.
HMAC: Hash-based message
authentication code
Note that:
The identity-key keyword is
unnecessary in password
authentication and optional in
public key authentication.
1-24
Chapter 1 SSH Configuration
Remarks
Required
The method of configuring
server public key on the
client is similar to that of
configuring client public
key on the server.
Required
Remarks