Operation Manual – SSH2.0
Quidway S3100 Series Ethernet Switches
Chapter 1 SSH Terminal Services
Huawei Technologies Proprietary
1-6
Table 1-4
Configure authentication type
Operation
Command
Remarks
Enter system view
system-view
—
Configure authentication type
for SSH users
ssh user username
authentication-type
{
password
|
password-publickey
|
rsa
|
all
}
Required
Caution:
z
If RSA authentication type is defined, then the RSA public key of the client user must
be configured on the switch.
z
By default, no authentication type is specified for a new user, so they cannot access
the switch.
z
For the
password-publickey
authentication type: SSHv1 client users can access
the switch as long as they pass one of the two authentications. SSHv2 client users
can access the switch only when they pass both the authentications.
IV. Configuring server SSH attributes
Configuring server SSH authentication timeout time and retry times can effectively
assure security of SSH connections and avoid illegal actions.
Table 1-5
Configure server SSH attributes
Operation
Command
Remarks
Enter system view
system-view
—
Set SSH authentication
timeout time
ssh server timeout
seconds
Optional
The timeout time
defaults to 60 seconds.
Set SSH authentication
retry times
ssh server
authentication-retries
times
Optional
The retry times defaults
to 3.
V. Configuring client public keys
You can configure RSA public keys for client users on the switch and specify RSA
private keys, which correspond to the public keys, on the client. Then client keys are
generated randomly by the SSH2.0 client software. This operation is not required for
password authentication type.
