H3C S5500-EI series Operation Manual page 1365

Operation Manual – SSH
H3C S5500-EI Series Ethernet Switches
Enter system view
Create an
SSH user,
and specify
the service
type and
authenticati
on method
Caution:
After passing AAA authentication, an AAA user without SSH user account still can
log on to the server using password authentication and Stelnet or SFTP service.
An SSH server supports up to 1024 SSH users.
The service type of an SSH user can be Stelnet or SFTP. stelnet, or the secure
Telnet protocol, refers to the traditional SSH service. For information about stelnet,
refer to
about sftp, refer to
For successful login through SFTP, you must set the user service type to sftp or all.
You can set the service type of an SSH user to stelnet or all if the user does not
need SFTP service.
As SSH1 does not support service type sftp, if the client uses SSH1 to log in to the
server, you must set the service type to stelnet or all on the server. Otherwise, the
client will fail to log in successfully.
The working folder of an SFTP user is subject to the user authentication method.
For a user using only password authentication, the working folder is the AAA
authorized one. For a user using only publickey authentication or using both the
publickey and password authentication methods, the working folder is the one set
by using the ssh user command.
The configured authentication method takes effect when the user logs in next time.
To do...
system-view
ssh user username service-type
stelnet authentication-type
For stelnet
{ password | { any |
users
password-publickey | publickey }
assign publickey keyname }
ssh user username service-type { all
| sftp } authentication-type
For all
{ password | { any |
users or
password-publickey | publickey }
sftp users
assign publickey keyname
work-directory directory-name }
SSH2.0 Overview. sftp represents the secure FTP protocol. For information
SFTP Overview.
Use the command...
1-11
Chapter 1 SSH Configuration
Remarks
—
Required
Use either
command.