3Com 4800G Series, Руководство по настройке

Страница: 1110 / 1246

1110 C
HAPTER
88: SSH C
ONFIGURATION
■
password-publickey : Performs both password authentication and publickey
authentication of the client. A client running SSH1 client only needs to pass
either type of the two, while a client running SSH2 client must pass both of
them to login.
■
any : Performs either password authentication or publickey authentication. The
client tries publickey authentication first.
Session request
After passing authentication, the client sends a session request to the server, while
the server listens to and processes the request from the client. If the client passes
authentication, the server sends back to the client an SSH_SMSG_SUCCESS packet
and goes on to the interactive session stage with the client. Otherwise, the server
sends back to the client an SSH_SMSG_FAILURE packet, indicating that the
processing fails or it cannot resolve the request.
Interactive session
In this stage, the server and the client exchanges data in this way:
■
The client encrypts and sends the command to be executed to the server.
■
The server decrypts and executes the command, and then encrypts and sends
the result to the client.
■
The client decrypts and displays the result on the terminal.
n
■
During interactive session, the client can send the commands to be performed
by pasting the text, which must be within 2000 bytes. It is recommended that
the text pasted be commands in the same view; otherwise, the server may not
be able to perform the commands.
■
If the text exceeds 2000 bytes, you can upload the configuration file to the
server and use the configuration file to restart the server so that the server
executes the commands.
Configuring the
Device as an SSH
Server
SSH Server
Configuration Task List
Complete the following tasks to configure an SSH server:
Task Remarks
“Enabling SSH Server” on page 1111 Required
“Configuring the User Interfaces for SSH Clients” on page 1111 Required
“Configuring
RSA and DSA
Keys” on page
1111 “Creating RSA or DSA key pairs” on page 1111 Required
“Exporting RSA or DSA key pairs” on page 1112 Optional
“Destroying RSA or DSA key pairs” on page 1112 Optional
“Configuring a Client Public Key” on page 1112 Required for publickey
authentication users
and optional for
password
authentication users
“Configuring an SSH User” on page 1113 Optional