SMC Networks 7824M/FSW - annexe 1, Management Manual

Page: 151 / 748

C
ONFIGURING THE
S
ECURE
S
HELL
6-13
Authenticating SSH v2 Clients
a. The client first queries the switch to determine if DSA public key
authentication using a preferred algorithm is acceptable.
b. If the specified algorithm is supported by the switch, it notifies the
client to proceed with the authentication process. Otherwise, it
rejects the request.
c. The client sends a signature generated using the private key to the
switch.
d. When the server receives this message, it checks whether the
supplied key is acceptable for authentication, and if so, it then
checks whether the signature is correct. If both checks succeed, the
client is authenticated.
Note: The SSH server supports up to four client sessions. The maximum
number of client sessions includes both current Telnet sessions
and SSH sessions.
Generating the Host Key Pair
A host public/private key pair is used to provide secure communications
between an SSH client and the switch. After generating this key pair, you
must provide the host public key to SSH clients and import the client’s
public key to the switch as described in the preceding section (Command
Usage).
Field Attributes
• Public-Key of Host-Key – The public key for the host.
- RSA: The first field indicates the size of the host key (e.g., 1024), the
second field is the encoded public exponent (e.g., 65537), and the last
string is the encoded modulus.
- DSA: The first field indicates that the encryption method used by SSH
is based on the Digital Signature Standard (DSS). The last string is the
encoded modulus.