H3C S3100 8C SI Operation Manual page 725

Operation Manual – SSH
H3C S3100 Series Ethernet Switches
Note:
After generating the key pair, you need to upload the key pair file to the server through
FTP or TFTP and complete the server end configuration before you continue to
configure the client.
# Disable first-time authentication on the device.
[SwitchA] undo ssh client first-time
Note:
When first-time authentication is not supported, you must first generate a DSA key pair
on the server and save the key pair in a file named Switch002, and then upload the file
to the SSH client through FTP or TFTP. For details, refer to the above part "Configure
Switch B".
# Import the public key pair named Switch002 from the file Switch002.
[SwitchA] public-key peer Switch002 import sshkey Switch002
# Specify the host public key pair name of the server.
[SwitchA] ssh client 10.165.87.136 assign publickey Switch002
# Establish the SSH connection to server 10.165.87.136.
[SwitchA] ssh2 10.165.87.136 identity-key dsa
Username: client001
Trying 10.165.87.136 ...
Press CTRL+K to abort
Connected to 10.165.87.136 ...
**************************************************************************
* Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent,
* no decompiling or reverse-engineering shall be allowed.
**************************************************************************
<SwitchB>
1-51
Chapter 1 SSH Configuration
*
*