HP PROCURVE 2910AL, Access Security Manual

Page: 264 / 594

Configuring Secure Shell (SSH)
Further Information on SSH Client Public-Key Authentication
Syntax: clear crypto public-key
Deletes the client-public-key file from the switch.
Syntax: clear crypto public-key 3
Deletes the entry with an index of 3 from the
client-public-key file on the switch.
Enabling Client Public-Key Authentication. After you TFTP a client-
public-key file into the switch (described above), you can configure the switch
to allow the following:
■ If an SSH client’s public key matches the switch’s client-public-key file,
allow that client access to the switch. If there is not a public-key match,
then deny access to that client.
Syntax: aaa authentication ssh login public-key none
Allows SSH client access only if the switch detects a match
between the client’s public key and an entry in the client-
public-key file most recently copied into the switch.
C a u t i o n
To enable client public-key authentication to block SSH clients whose public
keys are not in the client-public-key file copied into the switch, you must
configure the Login Secondary as
none
. Otherwise, the switch allows such
clients to attempt access using the switch’s Operator password.
7-28