Generating The Host Key; Adding The User Public Key - Juniper JUNOS OS 10.4 - PROTECTED SYSTEM DOMAIN Configuration Manual

JUNOS 10.4 Protected System Domain Configuration Guide

Generating the Host Key

Adding the User Public Key

46
SSH access requires a host key and a user public key.
To generate the host key:
Use an existing username and password to connect to the JCS management module
1.
serial port. For example:
tcsh-1:telnet bcgmm1-con
In this example, the serial port is connected to a telnet server port identified as
.
bcgmm1-con
Use the env command to specify
2.
system> env —T mm[1]
Use the command to generate a host key. For example:
3. sshcfg
system:mm[1]> sshcfg —hk gen
It takes about 1 minute to generate a host key.
You can use the
4. displaylog
system:mm[1]> displaylog —f
Once the host key is generated, use the
5.
CLI. For example:
system:mm[1]> sshcfg —cstatus enabled
To generate a user public key:
See the "Generating the Host Key" section to generate a host key.
1.
Locate the
/.ssh/authorized_keys
2.
Use the command to add your public key.
3. users
You copy the public key from the
line. For example:
system:mm[1]> users —2 —pk —1 —add paste-key-here
Issue the users command to verify that the public key has been installed. For example:
4.
system:mm[1]> users —2
- n chang
- a Role:supervisor
...
Number of SSH public keys installed for this user: 1
Last login: 1/28/08 09:26:59
Log out, and then use SSH to log back in. For example:
5.
mm[1] as the configuration target. For example:
command to monitor host key generation. For example:
command to enable SSH for the JCS
sshcfg
file and copy your public key from this file.
file and paste it on the command
authorized_keys
Copyright © 2010, Juniper Networks, Inc.