3Com 4800G Series, Configuration Manual

Page: 1114 / 1246

1114 C
HAPTER
88: SSH C
ONFIGURATION
c
CAUTION:
■
After passing AAA authentication, an AAA user without SSH user account still
can log on to the server using password authentication and Stelnet or SFTP
service.
■
An SSH server supports up to 1024 SSH users.
■
The service type of an SSH user can be Stelnet or SFTP. stelnet , or the secure
Telnet protocol, refers to the traditional SSH service. For information about
stelnet , refer to “SSH2.0 Overview” on page 1107. sftp represents the secure
FTP protocol. For information about sftp , refer to “SFTP Overview” on page
1131.
■
For successful login through SFTP, you must set the user service type to sftp or
all .
■
You can set the service type of an SSH user to stelnet or all if the user does
not need SFTP service.
■
As SSH1 does not support service type sftp , if the client uses SSH1 to log in to
the server, you must set the service type to stelnet or all on the server.
Otherwise, the client will fail to log in successfully.
■
The working folder of an SFTP user is subject to the user authentication
method. For a user using only password authentication, the working folder is
the AAA authorized one. For a user using only publickey authentication or
using both the publickey and password authentication methods, the working
folder is the one set by using the
ssh user command.
■
The configured authentication method takes effect when the user logs in next
time.
n
For users using publickey authentication:
■
You must configure on the device the corresponding username and public
keys.
To do… Use the command… Remarks
Enter system view system-view -
Create an SSH user,
and specify the
service type and
authentication
method For stelnet users ssh user username
service-type stelnet
authentication-type
{ password | { any |
password-publickey |
publickey } assign
publickey keyname }
Required
Use either command.
For all users or sftp
users ssh user username
service-type { all |
sftp }
authentication-type
{ password | { any |
password-publickey |
publickey } assign
publickey keyname
work-directory
directory-name }