3Com 5500-EI Series, Reference Manual

Page: 1003 / 1314

1-27
If a client does not support first-time authentication, it will refuse to access any unauthenticated server.
In this case, you need to configure the public key of the server on the client and associate the public key
and the server so that the client can authenticate the server during login.
If a pair of SSH peers are both switches that support both DSA and RSA, you must configure the DSA
public key of the server on the client.
Related command: ssh client first-time enable .
Examples
# Specify the name of the DSA public key of the server (whose IP address is 192.168.0.1) as pub.ppk
on the client.
<Sysname>system-view
System View: return to User View with Ctrl+Z.
[Sysname] ssh client 192.168.0.1 assign publickey pub.ppk
ssh client first-time enable
Syntax
ssh client first-time enable
undo ssh client first-time
View
System view
Parameters
None
Description
Use the ssh client first-time enable command to enable the client to run first-time authentication for
the SSH server it accesses for the first time.
Use the undo ssh client first-time command to disable the client from running first-time
authentication.
By default, the client is enabled to run first-time authentication.
Note that:
z
With first-time authentication enabled, an SSH client that is not configured with the server’s host
public key can continue accessing the server when it accesses the server for the first time. The
SSH server sends its host public key to the client automatically, and the client saves the key for use