H3C S7500 Series Operation Manual page 833

Operation Manual – SSH Terminal Service
H3C S7500 Series Ethernet Switches
Note:
The SSH client does not authenticate the SSH server for the first time access. It is
necessary to configure on the SSH client the RAS host public key of the SSH server.
1) Configure the client not to perform first-time authentication to the SSH server.
<H3C> system-view
[H3C] undo ssh client first-time
2) Configure server public keys on the client.
[H3C] rsa peer-public-key public
[H3C-rsa-public-key] public-key-code begin
[H3C-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463
[H3C-rsa-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913
[H3C-rsa-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4
[H3C-rsa-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC
[H3C-rsa-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16
[H3C-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125
[H3C-rsa-key-code] public-key-code end
[H3C-rsa-public-key] peer-public-key end
[H3C] ssh client 10.165.87.136 assign rsa-key public
3) Start SSH client
Settings for the two authentication types are described respectively in the following
section:
Adopt the password authentication and start the client using the default encryption
algorithm.
[H3C] ssh2 10.165.87.136
username: client003
Trying 10.165.87.136 ...
Press CTRL+K to abort
Connected to 10.165.87.136 ...
Enter password:
**************************************************************************
* Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent,
* no decompiling or reverse-engineering shall be allowed.
**************************************************************************
<H3C>
Adopt the RSA public key authentication and start the client using the defined
encryption algorithm.
Chapter 1 SSH Terminal Service Configuration
1-12
*
*