H3C S5600 Series Operation Manual page 918

To do...
Specify a source interface for the
SSH server
You can configure a login header only when the service type is stelnet. For configuration of
service types, refer to
For details of the header command, refer to the corresponding section in Login Command.
Configuring the SSH Server to Be Compatible with SSH1 Clients
Follow these steps to configure the SSH server to be compatible with SSH1 clients:
To do...
Enter system view
Configure the SSH server to be
compatible with SSH1 clients
Configuring Key Pairs
The SSH server's key pairs are for generating session keys and for SSH clients to authenticate the
server. The SSH client's key pairs are for the SSH server to authenticate the SSH clients in publickey
authentication mode. Both RSA and DSA key pairs are supported.
As different clients may support different public key algorithms, the key pairs negotiated between the
server and clients may be different. Therefore, you need to generate both RSA and DSA key pairs on
the server to ensure that clients can log in to the server successfully.
You can specify an algorithm for publickey authentication as needed.
Generating key pairs
When generating a key pair, you will be prompted to enter the key length in bits, which is between 512
and 2048. The default length is 1024. If the key pair already exists, the system will ask whether to
overwrite it.
Follow these steps to create key pairs:
Enter system view
Generate key
pair(s)
ssh-server source-interface
interface-type interface-number
Specifying a Service Type for an SSH User on the
system-view
ssh server compatible-ssh1x
enable
To do...
Generate an RSA key
pairs
Use the command...
Use the command...
Use the command...
system-view
public-key local create rsa
1-8
Remarks
Optional
By default, no source interface is
configured.
Server.
Remarks
—
Optional
By default, the SSH server is
compatible with SSH1 clients.
Remarks
—
Required
By default, no key
pairs are generated.