3Com 5500-EI PWR Install Manual page 820

1 SSH Configuration·····································································································································1-1
SSH Overview·········································································································································1-1
Introduction to SSH ·························································································································1-1
Algorithm and Key ···························································································································1-1
SSH Operating Process ··················································································································1-2
SSH Server and Client ····························································································································1-4
Configuring the SSH Server····················································································································1-6
Configuring the User Interfaces for SSH Clients·············································································1-7
Configuring the SSH Management Functions·················································································1-7
Configuring the SSH Server to Be Compatible with SSH1 Clients ·················································1-8
Configuring Key Pairs······················································································································1-8
Creating an SSH User and Specifying an Authentication Type ····················································1-10
Specifying a Service Type for an SSH User on the Server···························································1-11
Configuring the Public Key of a Client on the Server ····································································1-12
Assigning a Public Key to an SSH User························································································1-13
Exporting the Host Public Key to a File ·························································································1-13
Configuring the SSH Client ···················································································································1-14
SSH Client Configuration Task List ·······························································································1-14
Configuring an SSH Client that Runs SSH Client Software ··························································1-15
Configuring an SSH Client Assumed by an SSH2-Capable Switch··············································1-22
Displaying and Maintaining SSH Configuration ····················································································1-25
Comparison of SSH Commands with the Same Functions ··································································1-26
SSH Configuration Examples ···············································································································1-27
When Switch Acts as Server for Local Password Authentication ·················································1-27
When Switch Acts as Server for Password and RADIUS Authentication ·····································1-30
When Switch Acts as Server for Password and HWTACACS Authentication ······························1-35
When Switch Acts as Server for Publickey Authentication ···························································1-38
When Switch Acts as Client for Password Authentication ····························································1-45
When Switch Acts as Client for Publickey Authentication·····························································1-47
When Switch Acts as Client and First-Time Authentication is not Supported·······························1-49
Table of Contents
i