H3C S5100-SI Operation Manual page 602

I. Configuring the SSH client for publickey authentication
When the authentication mode is publickey, you need to configure the RSA or DSA public key of the
client on the server:
To generate a key pair on the client, refer to
To export the RSA or DSA public key of the client, refer to
To configure the public key of a client on the server, refer to
on the Server.
Configuring whether first-time authentication is supported
When the device connects to the SSH server as an SSH client, you can configure whether the device
supports first-time authentication.
With first-time authentication enabled, an SSH client that is not configured with the server host
public key can continue accessing the server when it accesses the server for the first time, and it
will save the host public key on the client for use in subsequent authentications.
With first-time authentication disabled, an SSH client that is not configured with the server host
public key will be denied of access to the server. To access the server, a user must configure in
advance the server host public key locally and specify the public key name for authentication.
Table 1-14 Follow these steps to enable the device to support first-time authentication:
To do...
Enter system view
Enable the device to support
first-time authentication
Table 1-15 Follow these steps to disable first-time authentication support:
To do...
Enter system view
Disable first-time authentication
support
Configure server public key
Specify the host key name of
the server
Configuring Key
Use the command...
system-view
ssh client first-time enable
Use the command...
system-view
undo ssh client first-time
Refer to Configuring the Public
Key of a Client on the Server
ssh client { server-ip |
server-name } assign
publickey keyname
1-21
Pairs.
Exporting the Host Public Key to a
Configuring the Public Key of a Client
Remarks
—
Optional
By default, the client is enabled
to run first-time authentication.
Remarks
—
Required
By default, the client is enabled
to run first-time authentication.
Required
The method of configuring
server public key on the client is
similar to that of configuring
client public key on the server.
Required
File.