3Com 4210 9-Port Configuration Manual page 589

The SSH server's key pairs are for generating session keys and for SSH clients to authenticate the
server. As different clients may support different public key algorithms, the server may use different
key pair for negotiation with different clients. Therefore, you need to generate both RSA and DSA
key pairs on the server to help ensure that clients can log in to the server successfully.
The command for generating a key pair can survive a reboot. You only need to configure it once.
Some third-party software, for example, WinSCP, requires that the modulo of a public key must be
greater than or equal to 768. Therefore, a local key pair of more than 768 bits is recommended.
Creating an SSH User and Specifying an Authentication Type
This task is to create an SSH user and specify an authentication type for it. Specifying an authentication
type for a new user is a must to get the user login.
Table 1-6 Follow these steps to configure an SSH user and specify an authentication type for the user:
To do...
Enter system view
Specify the default
authentication type for
all SSH users
Create an SSH user,
and specify an
authentication type for it
Use the command...
system-view
ssh authentication-type
default { all | password |
password-publickey |
publickey }
ssh user username
ssh user username
authentication-type { all |
password |
password-publickey |
publickey }
1-8
Remarks
—
Use either command.
By default, no SSH user is created
and no authentication type is
specified.
Note that: If both commands are used
and different authentication types are
specified, the authentication type
specified with the ssh user
authentication-type command takes
precedence.