Operation Manual – SSH2.0
Quidway S3100 Series Ethernet Switches
Chapter 1 SSH Terminal Services
Huawei Technologies Proprietary
1-8
Operation
Command
Remarks
Enable the
connection
between SSH
client and server
ssh2
host-ipaddr
[
port
]
[
prefer_kex
{
dh_group1
|
dh_exchange_group
} ]
[
prefer_ctos_cipher
{
des
|
aes128
} ] [
prefer_stoc_cipher
{
des
|
aes128
} ]
[
prefer_ctos_hmac
{
sha1
|
sha1_96
|
md5
|
md5_96
} ]
[
prefer_stoc_hmac
{
sha1
|
sha1_96
|
md5
|
md5_96
} ]
Required
You can use this
command to enable
the connection
between SSH client
and server, define key
exchange algorithm
preference, encryption
algorithm preference
and HMAC algorithm
preference between
the server and client.
Allocate a public
key to the server
ssh client server-ip
assign rsa-key
keyname
Required
You can specify on the
client the public key
for the server to be
connected to
guarantee the client
can be connected to a
reliable server.
Configure the
client to run the
initial
authentication
ssh client first-time enable
Optional
By default, the client
runs the initial
authentication.
Note:
In the initial authentication, if the SSH client does not have the public key for the server
which it accesses for the first time, the client continues to access the server and save
locally the public key of the server. Then at the next access, the client can authenticate
the server via the public key saved locally.
1.1.4 Displaying SSH Configuration
Use the
display
commands in any view to view the running of SSH and further to check
the configuration result.
Table 1-8
Display SSH configuration
Operation
Command
Display host and server public
keys
display rsa local-key-pair public
Display client RSA public key
display rsa peer-public-key
[
brief
|
name
keyname
]