H3C S5810 Series, Руководство по эксплуатации

Страница: 528 / 820

1-4
To configure the public key of the peer, you can:
z
Configure it manually: You can input on or copy the public key of the peer to the local host. The
copied public key must have not been converted and be in the distinguished encoding rules (DER)
encoding format.
z
Import it from the public key file: The system automatically converts the public key to a string coded
using the PKCS (Public Key Cryptography Standards). Before importing the public key, you must
upload the peer's public key file (in binary) to the local host through FTP or TFTP.
z
You are recommended to configure the public key of the peer by importing it from a public key file.
z
The device supports up to 20 host pubic keys of peers.
Follow these steps to configure the public key of a peer manually:
To do… Use the command… Remarks
Enter system view system-view —
Enter public key view public-key peer keyname —
Enter public key code view
public-key-code begin
—
Configure a public key of the
peer
Enter the key
Required
Spaces and carriage returns
are allowed between
characters.
Return to public key view public-key-code end
—
When you exit public key code
view, the system automatically
saves the public key.
Return to system view peer-public-key end —
Follow these steps to import the host public key of a peer from the public key file:
To do… Use the command… Remarks
Enter system view system-view —
Import the host public key of a
peer from the public key file
public-key peer keyname
import sshkey filename
Required
Displaying and Maintaining Public Keys
To do… Use the command… Remarks
Display the public keys of the
local key pairs display public-key local { dsa
| rsa } public
Display the public keys of the
peers display public-key peer [ brief
| name publickey-name ]
Available in any view