Use the undo ssh authentication-type default command to remove the specified default
authentication mode. That is, no default authentication mode is specified for SSH users. In this case,
when an SSH user is added, you must specify an authentication mode for the user at the same time.
By default, no default authentication mode is specified.
The differences between password authentication, publickey authentication, and password-publickey
authentication are:
Password authentication is vulnerable to attacks.
Publickey authentication provides more secure SSH connections than password authentication
does. The mode is easy to use and prevents illegal operations such as malicious password guess.
After the configuration, the subsequent authentications are implemented automatically without
asking you to enter the password.
Password-publickey authentication takes the advantages of both password authentication and
publickey authentication. An SSH user must pass both types of authentication before logging in.
The combination of password and publickey authentications eliminates the vulnerability of the SSH
server caused by the clients. You can use password-publickey authentication together with AAA for
authentication and authorization of users.
Related commands: display ssh user-information.
Examples
# Specify the publickey authentication as the default authentication mode.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname]ssh authentication-type default publickey
# Create an SSH user
[Sysname] ssh user user1
# Display information about configured SSH users.
[Sysname] display ssh user-information
Username
user1
ssh client assign
Syntax
ssh client { server-ip | server-name } assign { publickey | rsa-key } keyname
undo ssh client { server-ip | server-name } assign { publickey | rsa-key }
View
System view
Parameters
server-ip: IP address of the server.
server-name: Name of the server, a string of 1 to 184 characters.
keyname: Name of the public key of the server, a string of 1 to 64 characters.
Authentication-type
publickey
1-21
User-public-key-name
null
Service-type
stelnet