Operation Manual – SSH
H3C S3100 Series Ethernet Switches
Chapter 1 SSH Configuration
1-23
I. Configuring the SSH client for publickey authentication
When the authentication mode is
publickey
, you need to configure the RSA or DSA
public key of the client on the server:
z
To generate a key pair on the client, refer to
Generating/Destroying Key Pairs
.
z
To export the RSA or DSA public key of the client, refer to
Exporting the RSA or
DSA Public Key
.
z
To configure the public key of a client on the server, refer to
Configuring the Public
Key of a Client on the Server
.
II. Configuring whether first-time authentication is supported
When the device connects to the SSH server as an SSH client, you can configure
whether the device supports first-time authentication.
z
With first-time authentication enabled, an SSH client that is not configured with the
server host public key can continue accessing the server when it accesses the
server for the first time, and it will save the host public key on the client for use in
subsequent authentications.
z
With first-time authentication disabled, an SSH client that is not configured with the
server host public key will be denied of access to the server. To access the server,
a user must configure in advance the server host public key locally and specify the
public key name for authentication.
Table 1-15
Follow these steps to enable the device to support first-time authentication:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enable the device to
support first-time
authentication
ssh client first-time
enable
Optional
By default, the client is
enabled to run first-time
authentication.
Table 1-16
Follow these steps to disable first-time authentication support:
To do...
Use the command...
Remarks
Enter system view
system-view
—
Disable first-time
authentication support
undo ssh client
first-time
Required
By default, the client is
enabled to run first-time
authentication.
