H3C S5120-EI Series, Руководство по эксплуатации

Страница: 632 / 1191

1-4
back to the client an SSH_SMSG_SUCCESS packet and goes on to the interactive session stage with
the client. Otherwise, the server sends back to the client an SSH_SMSG_FAILURE packet, indicating
that the processing fails or it cannot resolve the request.
Interaction
In this stage, the server and the client exchanges data in the following way:
z
The client encrypts and sends the command to be executed to the server.
z
The server decrypts and executes the command, and then encrypts and sends the result to the
client.
z
The client decrypts and displays the result on the terminal.
z
In the interaction stage, you can execute commands from the client by pasting the commands in
text format (the text must be within 2000 bytes). It is recommended that the commands are in the
same view; otherwise, the server may not be able to perform the commands correctly.
z
If the command text exceeds 2000 bytes, you can execute the commands by saving the text as a
configuration file, uploading the configuration file to the server through SFTP, and then using the
configuration file to restart the server.
Configuring the Device as an SSH Server
SSH Server Configuration Task List
Complete the following tasks to configure an SSH server:
Task Remarks
Generating a DSA or RSA Key Pair Required
Enabling SSH Server Required
Configuring the User Interfaces for SSH Clients Required
Configuring a Client Public Key
Required for publickey authentication users and
optional for password authentication users
Configuring an SSH User Optional
Setting the SSH Management Parameters Optional
Generating a DSA or RSA Key Pair
The DSA or RSA key pair will be used to generate the session ID in the key and algorithm negotiation
stage and used by the client to authenticate the server.
Follow these steps to generate a DSA or RSA key pair on the SSH server:
To do… Use the command… Remarks
Enter system view
system-view
—
Generate the local DSA or RSA
key pair
public-key local create
{
dsa
|
rsa
}
Required
By default, there is neither DSA
key pair nor RSA key pair.