H3C SecPath F1800-A Operation Manual page 73

Operation Manual - Getting Started
H3C SecPath F1800-A Firewall
Table 2-80 Configuring protocols supported by user interface
Configure protocols supported by user
interface.
2) Creating or deleting local RSA key pair
The configuration task is used to generate local server key pair and host key pair. If
RSA key exists, the system will prompt whether to replace the original key.
Generated key pair is named in the following forms:
The SecPath F1800-A name + "server"
The SecPath F1800-A name + "host"
In general, the server key is at least 128 bits longer than the host key, and the
minimum length of the host key is 512 bits and the maximum length of the server key
is 2048 bits.
Do as follows in system view.
Table 2-81 Creating or deleting local RSA key pair
Create local RSA key pair.
Delete local RSA key pair.
Caution:
To implement SSH login, you must configure and generate local RSA key pair.
Note that you need to use the rsa local-key-pair create command to generate local
key pair before performing other SSH configurations.
In addition, you need not use the command again when the SecPath F1800-A is
rebooted next time.
3) Configuring SSH user authentication mode
Using this command, you can specify authentication mode for SSH users. For a new
user, you must specify authentication mode for him; otherwise, he cannot log on. To
create an SSH user, refer to the local-user command in "AAA Configuration" in
"06-Security Defence
user logs on next time.
Do as follows in system view.
Action
Action
Operation". The new authentication mode takes effect when the
1-66
Chapter 2 Basic SecPath F1800-A Configuration
Command
protocol inbound { all | ssh | Telnet }
Command
rsa local-key-pair create
rsa local-key-pair destroy