3Com 5500-EI PWR, Справочное руководство

Страница: 1001 / 1314

1-25
System View: return to User View with Ctrl+Z.
[Sysname] rsa peer-public-key 123 import sshkey abc
ssh authentication-type default
Syntax
ssh authentication-type default { all | password | password-publickey | publickey | rsa }
undo ssh authentication-type default
View
System view
Parameters
all : Specifies either the password authentication or the publickey authentication for SSH users.
password : Specifies the authentication mode for SSH users as password authentication.
password-publickey : Specifies that both the password and the publickey must be authenticated for
SSH users.
publickey : Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key )
authentication.
rsa : Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key )
authentication. The authentication modes specified by the rsa keyword and publickey keyword are
implemented in the same way.
Description
Use the ssh authentication-type default command to specify a default authentication mode for SSH
users. After this command is configured, when an SSH user is added by using the ssh user command,
the default authentication mode is adopted for the user if no authentication mode is specified by using
the ssh user authentication-type command.
Use the undo ssh authentication-type default command to remove the specified default
authentication mode. That is, no default authentication mode is specified for SSH users. In this case,
when an SSH user is added, you must specify an authentication mode for the user at the same time.
By default, no default authentication mode is specified.
The differences between password authentication, publickey authentication, and password-publickey
authentication are:
z
Password authentication is vulnerable to attacks.
z
Publickey authentication provides more secure SSH connections than password authentication
does. The mode is easy to use and prevents illegal operations such as malicious password guess.
After the configuration, the subsequent authentications are implemented automatically without
asking you to enter the password.
z
Password-publickey authentication takes the advantages of both password authentication and
publickey authentication. An SSH user must pass both types of authentication before logging in.
The combination of password and publickey authentications eliminates the vulnerability of the SSH
server caused by the clients. You can use password-publickey authentication together with AAA for
authentication and authorization of users.
Related commands: display ssh user-information .