3Com 5500-EI Series, Reference Manual

Page: 1009 / 1314

1-33
1 publickey 127.0.0.1 stelnet
ssh user authentication-type
Syntax
ssh user username authentication-type { all | password | password-publickey | publickey | rsa }
undo ssh user username authentication-type
View
System view
Parameters
username : SSH user name, a string of 1 to 184 characters. It cannot contain any of these characters:
slash (/), backslash (\), colon (:), asterisk (*), question mark (?), less than sign (<), greater than sign (>),
and the vertical bar sign (|). In addition, the @ sign can appear up to once, the username part (that is,
the string before the @ sign) cannot be more than 55 characters, and the domain name part cannot be
more than 128 characters.
all : Specifies that the authentication mode for the SSH user can be either password authentication or
publickey authentication.
password : Specifies the authentication mode for the SSH user as password authentication.
password-publickey : Specifies the authentication mode for the SSH user as password and publickey.
publickey : Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key )
authentication.
rsa : Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key )
authentication. The authentication modes specified by the rsa keyword and publickey keyword are
implemented in the same way
For the password-publickey authentication type:
z
SSH1 client users can access the switch as long as they pass one of the two authentications.
z
SSH2 client users can access the switch only when they pass both the authentications.
Description
Use the ssh user authentication-type command to specify the authentication mode for SSH users on
the server.
Use the undo ssh user authentication-type command to remove the configuration.
The differences between password authentication, publickey authentication, and password-publickey
authentication are:
z
Password authentication is vulnerable to attacks.
z
Publickey authentication provides more secure SSH connections than password authentication
does. The mode is easy to use and prevents illegal operations such as malicious password guess.