3Com 4200G 12-Port Configuration Manual page 327

Configuring authentication type
New users must specify authentication type. Otherwise, they cannot access the
switch.
Table 266 Configure authentication type
Operation
Enter system view
Configure authentication type for
SSH users
CAUTION:
If RSA authentication type is defined, then the RSA public key of the client user
■
must be configured on the switch.
By default, no authentication type is specified for a new user, so they cannot
■
access the switch.
For the password-publickey authentication type: SSHv1 client users can access
■
the switch as long as they pass one of the two authentications. SSHv2 client users
can access the switch only when they pass both the authentications.
Configuring server SSH attributes
Configuring server SSH authentication timeout time and retry times can effectively
assure security of SSH connections and avoid illegal actions.
Table 267 Configure server SSH attributes
Operation
Enter system view
Set SSH authentication
timeout time
Set SSH authentication retry
times
Configuring client public keys
You can configure RSA public keys for client users on the switch and specify RSA
private keys, which correspond to the public keys, on the client. Then client keys are
generated randomly by the SSH2.0 client software. This operation is not required for
password authentication type.
Table 268 Configure client public keys
Operation
Enter system view
Enter public key view
Enter public key edit view
Return to public key view from
public key edit view
Command
system-view
ssh user username
authentication-type { password |
password-publickey | rsa| all }
Command
system-view
ssh server timeout seconds
ssh server
authentication-retries times
Command
system-view
rsa peer-public-key
key-name
public-key-code begin
public-key-code end
SSH Terminal Services 313
Remarks
-
Required
Remarks
-
Optional
The timeout time defaults to
60 seconds.
Optional
The retry times defaults to 3.
Remarks
-
Required
You can key in a blank space
between characters, since the
system can remove the blank
space automatically. But the
public key should be
composed of hexadecimal
characters.
The system saves public key
data when exiting from public
key edit view