Huawei V300R005 Configuration Manual page 193

9 Telnet and SSH
Configuration Procedure
Step 1 Generate a local key pair on the server.
<Quidway> system-view
[Quidway] rsa local-key-pair create
The key name will be: Quidway_Host
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
Input the bits in the modulus[default = 512]:
Generating keys...
.......++++++++++++
..........++++++++++++
...................................++++++++
......++++++++
Step 2 Create an SSH user on the server.
# Configure the VTY user interface.
[Quidway] user-interface vty 0 4
[Quidway-ui-vty0-4] authentication-mode aaa
[Quidway-ui-vty0-4] protocol inbound ssh
[Quidway-ui-vty0-4] quit
# Set the password authentication for the SSH user Client001.
[Quidway] ssh user client001
[Quidway] ssh user client001 authentication-type password
# Set the password of the SSH user Client001 to huawei.
[Quidway] aaa
[Quidway-aaa]local-user client001 password simple huawei
[Quidway-aaa]local-user client001 service-type ssh
[Quidway-aaa] quit
# Configure the RSA authentication for the SSH user Client002.
[Quidway] ssh user client002
[Quidway] ssh user client002 authentication-type rsa
Step 3 Configure the RSA public key on the server.
# Generate the RSA public key on the client software.
9-32
It will take a few minutes.
If the local key pair is generated before, this step can be ignored.
The SSH client can be authenticated in four modes: password, RSA, password-RSA, and all.
If the password and password-RSA authentication is used, configure a local user of the same user
name.
If the RSA, password-RSA, and all authentication is used, the server must save the RSA public key
of the SSH client.
Create an SSH user Client001.
Create an SSH user Client002.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway NetEngine80
Configuration Guide - Basic Configurations
Issue 04 (2009-12-20)