3Com Switch 7700 Configuration Manual page 382

374 C 11: S
HAPTER YSTEM
M
ANAGEMENT
Configuring and Cancelling a Local RSA Key Pair
In executing this command, if you have configured an RSA host key pair, the
system gives an alarm after using this command and prompts that the existing one
will be replaced. The server key pair is created dynamically by the SSH server.
The maximum bit range of both key pairs is 2048 bits and the minimum is 512.
Perform the following configurations in system view.
Table 81 Configuring and Cancelling a Local RSA Key Pair
Operation
Configure the local RSA key pair
Cancel local RSA key pair
CAUTION: For a successful SSH login, you must configure and generate the local
RSA key pairs. To generate local key pairs, you need to execute the command
once, with no further action required even after the system is rebooted.
Configuring the Authentication Type
For a new user, you must specify the authentication type or the new user cannot
access the switch.
Perform the following configurations in system view
Table 82 Configuring the Authentication Type
Operation
Configure authentication type
Remove authentication type setting
If the configuration is the RSA authentication type, then the RSA public key of
client user must be configured on the switch, to perform the 7 and 8 serial
number marked configuration.
By default, no authentication type is specified for a new user, so the user cannot
access the switch.
Defining the Update Interval of the Server Key
Perform the following configurations in system view
Table 83 Defining the Update Interval of the Server Key
Operation
Define the update interval of the server key
By default, the system does not update the server key.
Command
rsa local-key-pair create
rsa local-key-pair destroy
.
Command
ssh user username authentication-type {
password | rsa | all }
undo ssh user username
authentication-type
.
Command
ssh server rekey-interval hours