3Com 4210 PWR Configuration Manual page 420

418 C 36: SSH C
HAPTER
When the Switch Acts as
an SSH Client and the
Authentication Type is
Publickey
ONFIGURATION
# Generate RSA and DSA key pairs.
[4210] public-key local create rsa
[4210] public-key local create dsa
# Set the authentication mode for the user interfaces to AAA.
[4210] user-interface vty 0 4
[4210-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[4210-ui-vty0-4] protocol inbound ssh
[4210-ui-vty0-4] quit
# Create local user "client001", and set the authentication password to abc,
the login protocol to SSH, and user command privilege level to 3.
[4210] local-user client001
[4210-luser-client001] password simple abc
[4210-luser-client001] service-type ssh level 3
[4210-luser-client001] quit
# Configure the authentication type of user client001 as password.
[4210] ssh user client001 authentication-type password
Configure Switch A
■
# Create a VLAN interface on the switch and assign an IP address, which serves
as the SSH client's address in an SSH connection.
<4210> system-view
[4210] interface vlan-interface 1
[4210-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[4210-Vlan-interface1] quit
# Establish a connection to the server 10.165.87.136.
[4210] ssh2 10.165.87.136
Username: client001
Trying 10.165.87.136 ...
Press CTRL+K to abort
Connected to 10.165.87.136 ...
The Server is not authenticated. Do you continue to access it?(Y/N):y
Do you want to save the server's public key?(Y/N):n
Enter password:
*************************************************************************
* Copyright(c) 2004-2007 3Com Corporation.
* Without the owner's prior written consent,
* no decompiling or reverse-switch fabricering shall be allowed.
*************************************************************************
<4210>
Network requirements
As shown in Figure 144, establish an SSH connection between Switch A (SSH
Client) and Switch B (SSH Server) for secure data exchange. The user name is
client001 and the SSH server's IP address is 10.165.87.136. Publickey
authentication is required.
*
*
*