3Com Switch 4210 9-Port, Configuration Manual

Page: 392 / 567

390 C
HAPTER
36: SSH C
ONFIGURATION
and goes on to the interactive session stage with the client. Otherwise, the server
sends back to the client an SSH_SMSG_FAILURE packet, indicating that the
processing fails or it cannot resolve the request. The client sends a session request
to the server, which processes the request and establishes a session.
Data exchange
In this stage, the server and the client exchanges data in this way:
■
The client encrypts and sends the command to be executed to the server.
■
The server decrypts and executes the command, and then encrypts and sends
the result to the client.
■
The client decrypts and displays the result on the terminal.
Configuring the SSH
Server
You must perform necessary configurations on the SSH server for SSH clients to
access.
SSH Server
Configuration Tasks
Configuring the Protocol
Support for the User
Interface
You must configure the supported protocol(s) for SSH remote login. Note that the
configuration does not take effect immediately, but will be effective for
subsequent login requests.
Table 299 SSH server configuration tasks
Tasks Description
Configuring
the SSH server Configuring the Protocol
Support for the User Interface Required
Generating/Destroying a RSA
or DSA Key Pair Required
Exporting the RSA or DSA
Public Key Optional
Creating an SSH User and
Specify an Authentication Type Required
Specifying a Service Type for
an SSH User Optional
Configuring SSH Management Optional
Configuring the Client Public
Key on the Server Required for pubilckey authentication;
unnecessary for password authentication
Assigning a Public Key to an
SSH User Required for pubilckey authentication;
unnecessary for password authentication
Table 300 Configure the protocol(s) that a user interface supports
Operation Command Description
Enter system view system-view -
Enter the view of one or
multiple user interfaces user-interface [ type ]
first-number [ last-number ]
-
Configure the authentication
mode as scheme authentication-mode
scheme
[
command-authorization ]
Required
By default, the user interface
authentication mode is
password