Configuration Commands - H3C LS-5100-16P-SI-OVS-H3 Configuration

SSH
H3C Low-End Ethernet Switches Configuration Examples
Executing the ssh authentication-type default password-publickey command
or the ssh user authentication-type password-publickey command means that
users must not only pass the password authentication but also pass the RSA
authentication to login the SSH server.
Executing the ssh authentication-type default all command or the ssh user
authentication-type all command means that users can login the SSH server as
long as they pass either the password or RSA authentication.
II. Public key configuration procedure and precautions
As shown inTable 2-1, you need to copy or import the public key from the client to the
server.
1) Manually configure the RSA public key
When a switch acts as the SSH client, use the display rsa local-key-pair public
command to display the RSA public key after creating RSA key pair through the
corresponding commands.
Manually copy the RSA public key to the SSH server. Thus, the SSH server has
the same public key as the SSH client, and can authenticate the SSH client when
the SSH client establishes a connection with it.
2) Import the RSA public key
When a switch acts as the SSH server, use the SSH client software to generate an
RSA key pair, and then upload the RSA public key file to the SSH server through
FTP or TFTP.
On the SSH server, import the public key from the public key file through
commands.
3) Precautions
When some SSH client software like PuTTY is used to generate an RSA key pair, you
can either manully configure the public key for the SSH server or import the public key
to the SSH server.

2.2.2 Configuration Commands

I. Common configuration
Table 2-2 Common configuration
Operation
Enter system view
Enter the view of one
or multiple
interfaces
Command
system-view
user-interface [ type-keyword ]
user
number [ ending-number ]
2-2
Chapter 2 SSH Configuration Commands
Remarks
—
—