241
Task Command Remarks
Display the local public keys.
display public-key local
{
dsa
|
rsa
}
public
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
Display the specified or all peer
public keys on the local device.
display public-key peer
[
brief
|
name
publickey-name
] [
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
Public key configuration examples
Unless otherwise noted, devices in the configuration examples are operating in non-FIPS mode.
Manually specifying the peer public key on the local device
Network requirements
As shown in
, to prevent illegal access, Device B (the local device) authenticates Device A (the
peer device) through a digital signature. Before configuring authentication parameters on Device B,
configure the public key of Device A on Device B.
•
Configure Device B to use the asymmetric key algorithm of RSA.
•
Manually specify the host public key of Device A's public key pair on Device B.
Figure 78
Network diagram
Configuration procedure
1.
Configure Device A;
# Create local RSA key pairs on Device A, setting the modulus length to the default, 1024 bits.
<DeviceA> system-view
[DeviceA] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
++++++
++++++
++++++++
++++++++
# Display the public keys of the local RSA key pairs.
[DeviceA] display public-key local rsa public
=====================================================
