H3C LS-5100-16P-SI-OVS-H3 Configuration page 84

SSH
H3C Low-End Ethernet Switches Configuration Examples
[H3C-Vlan-interface1] ip address 192.168.0.1 255.255.255.0
[H3C-Vlan-interface1] quit
# Generate RSA key pairs.
[H3C] rsa local-key-pair create
# Set the authentication mode for the user interfaces to AAA.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[H3C-ui-vty0-4] protocol inbound ssh
# Set the client's command privilege level to 3
[H3C-ui-vty0-4] user privilege level 3
[H3C-ui-vty0-4] quit
# Configure the authentication type of the SSH client named client 001 as RSA.
[H3C] ssh user client001 authentication-type rsa
Note:
Before performing the following steps, you must generate an RSA public key pair
(using the client software) on the client, save the key pair in a file named public, and
then upload the file to the SSH server through FTP or TFTP. For details, refer to
Configuring the SSH Client.
# Import the client's public key named "Switch001" from file "public".
[H3C] rsa peer-public-key Switch001 import sshkey public
# Assign the public key "Switch001" to client "client001".
[H3C] ssh user client001 assign rsa-key Switch001
2) Configure the SSH client
# Generate an RSA key pair, taking PuTTYGen as an example.
Run PuTTYGen.exe, choose SSH2(RSA) and click Generate.
Chapter 3 SSH Configuration Example
3-5