3Com SuperStack 4, Configuration Manual

Page: 360 / 432

372 C
HAPTER
12: F
ILE
S
YSTEM
M
ANAGEMENT
■
Setting system protocol and link maximum
■
Configuring and deleting local RSA key pair
■
Configuring authentication type
■
Defining update interval of server key
■
Defining SSH authentication timeout value
■
Defining SSH authentication retry value
■
Entering public key view and editing public key
■
Associating public key with SSH user
Setting System Protocol You must specify SSH protocol for the system before enabling SSH.
Perform the following configuration in User Inteface View.
Table 450 Setting System Protocols and Link Maximum
By default, the system supports Telnet and SSH protocols.
CAUTION: If SSH protocol is specified, to ensure a successful login, you must
configure the AAA authentication using the
authentication-mode scheme
command. The
protocol inbound ssh
configuration fails if you configure
authentication-mode password
and
authentication-mode none
. When you
configure SSH protocol successfully for the user interface, then you cannot
configure
authentication-mode password
and
authentication-mode none
any more.
Configuring and Canceling Local RSA Key Pair
In executing this command, if you have configured RSA host key pair, the system
gives an alarm after using this command and prompts that the existing one will be
replaced. The server key pair is created dynamically by the SSH server. The
maximum bit range of both key pairs is 2048 bits and the minimum is 512.
Please perform the following configurations in System View.
Table 451 Configuring and Canceling Local RSA Key Pair
CAUTION: For a successful SSH login, you must configure and generate the local
RSA key pairs. To generate local key pairs, you just need to execute the command
once, with no further action required even after the system is rebooted.
Configuring Authentication Type
For a new user, you must specify authentication type. Otherwise, they cannot
access the Switch.
Perform the following configurations in System View.
Operation Command
Set system protocol and link maximum
protocol inbound { all | ssh | telnet }
Operation Command
Configure local RSA key pair
rsa local-key-pair create
Cancel local RSA key pair
rsa local-key-pair destroy