Connection Phase; Using Secure Shell Dsa Public Key Authentication - Alcatel-Lucent OmniSwitch 6450 Management Manual

Using Secure Shell

Connection Phase

After successful authentication, both the client and the server process the Secure Shell connection
protocol. The OmniSwitch supports one channel for each Secure Shell connection. This channel can be
used for a Secure Shell session or a Secure Shell FTP session.

Using Secure Shell DSA Public Key Authentication

The following procedure is used to set up Secure Shell (SSH) DSA public key authentication (PKA)
between an OmniSwitch and a client device:
Note. Note that if PKA fails, the user is prompted for a password. This is the password that was specified
when the user name was created on the OmniSwitch.
1 Use the PuTTYgen SSH software on the client device to generate a type SSH2 DSA private and public
key pair.
2 Do not save the public key on the client device using PutTTYgen. Instead, copy the key from the
PuTTYgen public key window and paste the key into a text file with the filename userid_dsa.pub. Spec-
ify a valid OmniSwitch user login name for the userid portion of the filename. For example, the following
public key filename is for OmniSwitch user Thomas:
thomas_dsa.pub
3 Use PuTTYgen to save the private key on the client device.
4 Verify that the userid specified as part of the filename in Step 2 is a valid user name on the
OmniSwitch. If the username does not already exist in the switch configuration, create the user name with
the appropriate privileges.
5 FTP in ASCII mode the userid_dsa.pub file from the client device to the flash/network/pub directory
on the OmniSwitch. Create the flash/network/pub directory first if it does not already exist.
6 Using PuTTY software on the client device, access SSH, then Auth, and then select the private key
generated in Step 1 to start the authentication process.
7 To enforce Secure Shell PKA on a switch use the
Note. If a public key file (that is, thomas_dsa.pub) exists in the flash/network/pub directory on the
switch , PKA is still used even if this method of authentication was disabled using the
pubkey-auth command. Rename, move, or delete the public key file to ensure that PKA is disabled on the
switch.
page 2-16
ssh enforce pubkey-auth
OmniSwitch 6250/6450 Switch Management Guide
Logging Into the Switch
command.
ssh enforce
June 2013