331
# Create an SSH user
client002
.
Specify the authentication method as
publickey
for the user.
Assign the public key
switchkey
to the user.
[SwitchB] ssh user client002 service-type stelnet authentication-type publickey
assign publickey switchkey
# Create a local device management user
client002
.
Specify the service type as
ssh
for the user.
Assign the user role
network-admin
to the user.
[SwitchB] local-user client002 class manage
[SwitchB-luser-manage-client002] service-type ssh
[SwitchB-luser-manage-client002] authorization-attribute user-role network-admin
[SwitchB-luser-manage-client002] quit
3.
Establish an SSH connection to the Stelnet server
192.168.1.40
.
<SwitchA> ssh2 192.168.1.40
Username: client002
Press CTRL+C to abort.
Connecting to 192.168.1.40 port 22.
The server is not authenticated. Continue? [Y/N]:y
Do you want to save the server public key? [Y/N]:n
[email protected]'s password:
Enter a character ~ and a dot to abort.
******************************************************************************
* Copyright (c) 2010-2014 Hewlett-Packard Development Company,L.P. *
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
******************************************************************************
<SwitchB>
Select
Yes
to access the server and download the server's host public key. At the next connection
attempt, the client authenticates the server by using the saved server's host public key on the client.
SFTP configuration examples
Unless otherwise noted, devices in the configuration examples are in non-FIPS mode.
When you configure SFTP on a device that operates in FIPS mode, follow these restrictions and
guidelines:
•
The modulus length of the key pair must be 2048 bits.
•
When the device acts as an SFTP server, only RSA and ECDSA key pairs are supported.
Password authentication enabled SFTP server configuration
example
Network requirements
As shown in
:
•
You can log in to the switch through the SFTP client that runs on the host.
