Creating An Ssh User And Specifying An Authentication Type - H3C S5100-SI Series Operation Manual

Operation Manual – SSH
H3C S5100-SI/EI Series Ethernet Switches
Table 1-5 Follow these steps to create key pairs:
Enter system view
Generate
key pair(s)
Note:
The command for generating a key pair can survive a reboot. You only need to
configure it once.
It takes more time to encrypt and decrypt data with a longer key, which, however,
ensures higher security. Therefore, specify the length of the key pair accordingly.
Some third-party software, for example, WinSCP, requires that the modulo of a
public key must be greater than or equal to 768. Therefore, a local key pair of more
than 768 bits is recommended.
II. Destroying key pairs
The RSA or DSA keys may be exposed, and you may want to destroy the keys and
generate new ones.
Follow these steps to destroy key pairs:
Enter system view
Destroy
key pair(s)

1.3.5 Creating an SSH User and Specifying an Authentication Type

This task is to create an SSH user and specify an authentication type. Specifying an
authentication type for a new user is a must to get the user login.
An SSH user is represented as a set of user attributes on the SSH server. This set is
uniquely identified with the SSH username. When a user logs in to the SSH server from
the SSH client, a username is required so that the server can looks up the database for
To do...
Generate an
RSA key pairs
Generate a DSA
key pair
To do...
Destroy the
RSA key pairs
Destroy the
DSA key pair
Use the command...
system-view
public-key local create rsa
public-key local create dsa
Use the command...
system-view
public-key local destroy rsa
public-key local destroy dsa
1-11
Chapter 1 SSH Configuration
Remarks
—
Required
By default, no key
pairs are
generated.
Remarks
—
Optional