Configuring Ssh Server - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - System Management
Quidway S3000-EI Series Ethernet Switches

8.1.2 Configuring SSH Server

Basic configuration tasks refer to those required for successful connection from SSH
client to SSH server, which advanced configuration tasks are those modifying SSH
parameters.
Configuration tasks on SSH server include:
Setting system protocol and link maximum
Configuring and deleting local RSA key pair
Configuring authentication type
Defining update interval of server key
Defining SSH authentication timeout value
Defining SSH authentication retry value
Entering public key view and editing public key
Associating public key with SSH user
I. Setting system protocol
By default, the system only supports Telnet protocol, so you must specify SSH protocol
for the system before enabling SSH.
Please perform the following configuration in system view.
Table 8-1 Setting system protocols and link maximum
Set system
maximum
Caution:
If SSH protocol is specified, to ensure a successful login, you must configure the AAA
authentication using the authentication-mode scheme command. The protocol
inbound ssh configuration fails if you configure authentication-mode password and
authentication-mode none. When you configure SSH protocol successfully for the
user interface, then you cannot configure authentication-mode password and
authentication-mode none any more.
II. Configuring and canceling local RSA key pair
In executing this command, if you have configured RSA host key pair, the system gives
an alarm after using this command and prompts that the existing one will be replaced.
The server key pair is created dynamically by SSH server. The maximum bit range of
both key pairs is 2048 bits and the minimum is 512.
Operation
protocol and link
Huawei Technologies Proprietary
8-3
Chapter 8 SSH Terminal Services
Command
protocol inbound { all | ssh | telnet }