Ssh Configuration Examples; When Switch Acts As Server For Local Password Authentication - H3C S5600 Series Operation Manual

Operation Manual – SSH
H3C S5600 Series Ethernet Switches
Operation
Import RSA public key
from public key file
Specify publickey
authentication as the
default authentication
type
Specify on the client
the host public key of
the server to be
connected
Assign a public key to
an SSH user
Create an SSH user
and specify pubblickey
authentication as its
authentication type
Note:
After the RSA key pair is generated, the display rsa local-key-pair public
command displays two public keys (the host public key and server public key) when
the switch is working in SSH1-compatible mode, but only one public key (the host
public key) when the switch is working in SSH2 mode.
The result of the display rsa local-key-pair public command or the public key
converted with the SSHKEY tool contains no information such as the authentication
type, so they cannot be directly used as parameters in the public-key peer
command. For the same reason, neither can the result of the display public-key
local rsa public command be used in the rsa peer-public-key command directly.

1.7 SSH Configuration Examples

1.7.1 When Switch Acts as Server for Local Password Authentication

I. Network requirements
As shown in
and the switch (SSH Server) for secure data exchange. The host runs SSH2.0 client
software. Password authentication is required.
Original commands
rsa peer-public-key
keyname import sshkey
filename
ssh authentication-type
default rsa
ssh client { server-ip |
server-name } assign
rsa-key keyname
ssh user username assign
rsa-key keyname
ssh user username
authentication-type rsa
Figure 1-10, establish an SSH connection between the host (SSH Client)
1-27
Chapter 1 SSH Configuration
Current commands
public-key peer keyname
import sshkey filename
ssh authentication-type
default publickey
ssh client { server-ip |
server-name } assign
publickey keyname
ssh user username
assign publickey
keyname
ssh user username
authentication-type
publickey