HP 10500 series, Руководство по настройке безопасности

Страница: 404 / 596

390
01F7C62621216D5A572C379A32AC290
[SwitchA-pkey-public-key-key1]E55B394A217DA38B65B77F0185C8DB8095522D1EF044B465
E
8716261214A5A3B493E866991113B2D
[SwitchA-pkey-public-key-key1]485348
[SwitchA-pkey-public-key-key1] peer-public-key end
[SwitchA] quit
# Establish an SSH connection to the server, and specify the host public key of the server.
<SwitchA> ssh2 192.168.1.40 publickey key1
Username: client001
client001@192.168.1.40's password:
After you enter the correct password, you successfully log in to Switch B.
{
If the client does not have the server's host public key, the system will notify you to confirm
the further access when you access the server. Select
Yes to access the server and
download the server's host public key.
<SwitchA> ssh2 192.168.1.40
Username: client001
The server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:y
client001@192.168.1.40's password:
After you enter the correct password, you can access Switch B successfully. At the next
connection attempt, the client authenticates the server by using the saved server's host
public key on the client.
Publickey authentication enabled Stelnet client configuration
example
Network requirements
As shown in Figure 109 , Switch B acts as the Stelnet server, and it uses publickey authentication and
the DSA public key algorithm.
Establish an Stelnet connection between Switch A and Switch B, so you can log in to Switch B to
manage configurations.
Figure 109 Network diagram
Configuration procedure
In the server configuration, the client's host public key is required. Generate a DSA key pair on the
client before configuring the Stelnet server.
1. Configure the Stelnet client:
# Assign an IP address to VLAN-interface 2.
<SwitchA> system-view
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 192.168.1.56 255.255.255.0
[SwitchA-Vlan-interface2] quit