3Com 4500G Family Configuration Manual page 693

Configuration procedure
During SSH server configuration, the client public key is required. Therefore, you are recommended to
use the client software to generate a DSA key pair on the client before configuring the SSH server.
1) Configure the SSH client
# Create VLAN interface 1 and assign an IP address to it.
<SwitchA> system-view
[SwitchA] interface vlan-interface 1
[SwitchA-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[SwitchA-Vlan-interface1] quit
# Generate a DSA key pair.
[SwitchA] public-key local create dsa
# Export the DSA public key to file key.pub.
[SwitchA] public-key local export dsa ssh2 key.pub
[SwitchA] quit
Then, you need to transmit the public key file to the server through FTP or TFTP.
2) Configure the SSH server
# Generate RSA and DSA key pairs and enable SSH server.
<SwitchB> system-view
[SwitchB] public-key local create rsa
[SwitchB] public-key local create dsa
[SwitchB] ssh server enable
# Configure an IP address for VLAN interface 1, which the SSH client will use as the destination for SSH
connection.
[SwitchB] interface vlan-interface 1
[SwitchB-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[SwitchB-Vlan-interface1] quit
# Set the authentication mode for the user interfaces to AAA.
[SwitchB] user-interface vty 0 4
[SwitchB-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[SwitchB-ui-vty0-4] protocol inbound ssh
# Set the user command privilege level to 3.
[SwitchB-ui-vty0-4] user privilege level 3
[SwitchB-ui-vty0-4] quit
# Import the peer public key from the file key.pub.
[SwitchB] public-key peer Switch001 import sshkey key.pub
# Specify the authentication type for user client002 as publickey, and assign the public key Switch001
to the user.
[SwitchB] ssh user client002 service-type stelnet authentication-type publickey assign
publickey Switch001
3) Establish a connection between the SSH client and the SSH server
# Establish an SSH connection to the server (10.165.87.136).
<SwitchA> ssh2 10.165.87.136
Username: client002
1-21