
12-4
z
Import it from the public key file: The system automatically converts the public key to a string
coded using the PKCS (Public Key Cryptography Standards). Before importing the public key, you
must upload the peer's public key file (in binary) to the local host through FTP or TFTP.
z
If you choose to input the public key, the public key must be in a correct format. The key data
displayed by the
display public-key local public
command can be used to meet the format
requirements. The public key displayed in other methods may not meet the format requirements,
and the format-incompliant key cannot be saved. Thus, you are recommended to configure the
public key of the peer by importing it from a public key file.
z
The device supports up to 20 host pubic keys of peers.
Follow these steps to configure the public key of a peer manually:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter public key view
public-key peer keyname
—
Enter public key code view
public-key-code begin
—
Configure a public key of the
peer
Type or copy the key
Required
Spaces and carriage returns
are allowed between
characters.
Return to public key view
public-key-code end
—
When you exit public key code
view, the system automatically
saves the public key.
Return to system view
peer-public-key end
—
Follow these steps to import the host public key of a peer from the public key file:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Import the host public key of a
peer from the public key file
public-key peer
keyname
import sshkey
filename
Required
Displaying and Maintaining Public Keys
To do…
Use the command…
Remarks
Display the public keys of the
local key pairs
display public-key local
{
dsa
|
rsa
}
public
Display the public keys of the
peers
display public-key peer
[
brief
|
name publickey-name
]
Available in any view
Summary of Contents for 4210G Series
Page 459: ...4 8...
Page 493: ...12 1...
Page 968: ...19 6 000f e235 dc71 1 Config static GigabitEthernet 1 0 1 NOAGED 1 mac address es found...