HP A5830 Series, Руководство по настройке

Страница: 147 / 280

139
Task Remarks
asymmetric key pair on
the local device
Displaying or exporting the local host public key Optional
Destroying a local asymmetric key pair Optional
Specifying the peer public key on the local device Optional
Configuring a local asymmetric key pair on the
local device
Creating a local asymmetric key pair
Configuration guidelines
When you create an asymmetric key pair on the local device, follow these guidelines:
•
Create an asymmetric key pair of the proper type to work with a target application.
•
After you enter the command, specify a proper modulus length for the key pair. Table 10 compares
the three types of key pairs.
Table 10 A comparison between different types of asymmetric key pairs
Type Number of key pairs Modulus length Remarks
RSA
Two key pairs, one server key pair and
one host key pair. Each key pair
comprises a public key and a private key.
512 to 2048 bits
1024 by default
To achieve high
security, specify at least
768 bits.
DSA One key pair, the host key pair.
Only SSH1.5 uses the RSA server key pair.
Configuration procedure
To create a local asymmetric key pair:
To do… Use the command… Remarks
1. Enter system view.
system-view —
2. Create a local asymmetric key
pair.
public-key local create { dsa | rsa
}
Required.
By default, no asymmetric key
pair is created.
Key pairs created with the public-key local create command are saved automatically and can survive
system reboots.
Displaying or exporting the local host public key
In SSH, to allow your local device to be authenticated by a peer device through digital signature, you
must display or export the local host public key, which is then specified on the peer device.
To display or export the local host public key, choose one of the following methods:
•
Displaying and recording the host public key information