
128
To do...
Use the command…
Remarks
2.
Enable the switch to support
first-time authentication
ssh client first-time enable
Optional
By default, first-time authentication
is supported on a client.
Disable first-time authentication
For successful authentication of an SSH client not supporting first-time authentication, the server
host public key must be configured on the client and the public key name must be specified.
Follow these steps to disable first-time authentication:
To do...
Use the command…
Remarks
1.
Enter system view
system-view
—
2.
Disable first-time authentication
support
undo ssh client first-time
Optional
By default, first-time authentication
is supported on a client.
3.
Configure the server public key See
Configuring a client public key
Required
The method of configuring server
public key on the client is similar to
that of configuring client public key
on the server.
4.
Specify the host public key
name of the server
ssh client
authentication
server
server
assign publickey
keyname
Required
Establishing a connection between the SSH client and the
server
Follow these steps to establish the connection between the SSH client and the server:
To do...
Use the command…
Remarks
1.
Establish a
connection
between the SSH
client and server,
and specify the
public key
algorithm,
preferred
For an
IPv4 server
ssh2
server
[
port-number
] [
vpn-instance
vpn-
instance-name
] [
identity-key
{
dsa
|
rsa
} |
prefer-ctos-cipher
{
3des
|
aes128
|
des
} |
prefer-ctos-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} |
prefer-kex
{
dh-group-exchange
|
dh-group1
|
dh-group14
} |
prefer-stoc-cipher
{
3des
|
aes128
|
des
} |
prefer-stoc-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} ] *
Required
Use either
command in
user view.