H3C S5500-EI series Operation Manual page 1381

Operation Manual – SSH
H3C S5500-EI Series Ethernet Switches
Press CTRL+K to abort
Connected to 10.165.87.136...
Enter password:
**************************************************************************
* Copyright (c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent,
* no decompiling or reverse-engineering shall be allowed.
**************************************************************************
<SwitchB>
1.6.2 When Using Publickey Authentication
I. Network requirements
As shown in
(the SSH server) through SSH protocol.
Publickey authentication is used; the algorithm is DSA.
II. Network diagram
Figure 1-12 Network diagram of SSH client configuration (using publickey
authentication)
III. Configuration procedure
1) Configure the SSH server
# Generate RSA and DSA key pairs and enable SSH server.
<SwitchB> system-view
[SwitchB] public-key local create rsa
[SwitchB] public-key local create dsa
[SwitchB] ssh server enable
# Configure an IP address for VLAN interface 1, which the SSH client will use as the
destination for SSH connection.
[SwitchB] interface vlan-interface 1
[SwitchB-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[SwitchB-Vlan-interface1] quit
# Set the authentication mode for the user interface to AAA.
[SwitchB] user-interface vty 0 4
Figure 1-12, Switch A (the SSH client) needs to log on to Switch B
1-27
Chapter 1 SSH Configuration
*
*