Operation Manual - System Management
Quidway S3000-EI Series Ethernet Switches
Chapter 8 SSH Terminal Services
Huawei Technologies Proprietary
8-4
Table 8-2
Configuring and canceling local RSA key pair
Operation
Command
Configure local RSA key pair
rsa local-key-pair create
Cancel local RSA key pair
rsa local-key-pair destroy
Caution:
For a successful SSH login, you must configure and generate the local RSA key pairs.
To generate local key pairs, you just need to execute the command once, with no
further action required even after the system is rebooted.
III. Configuring authentication type
For a new user, you must specify authentication type. Otherwise, he/she cannot access
the switch.
Please perform the following configurations in system view.
Table 8-3
Configuring authentication type
Operation
Command
Configure authentication type
ssh user username
authentication-type
{
password
|
rsa
|
all
}
Remove authentication type setting
undo ssh user username
authentication-type
If the configuration is RSA authentication type, then the RSA public key of client user
must be configured on the switch, that is to perform the 7 and 8 serial number marked
configuration.
By default, no authentication type is specified for a new user, so he/she cannot access
the switch.
IV. Defining update interval of server key
Please perform the following configurations in system view.
Table 8-4
Defining update interval of server key
Operation
Command
Define update interval of server key
ssh server rekey-interval
hours
Restore the default update interval
undo ssh server rekey-interval
