306
Step Command
Remarks
3.
Set the login authentication
mode to
scheme
.
authentication-mode
scheme
By default, the authentication
mode is
password
.
For more information about this
command, see
Fundamentals
Command Reference
.
Configuring a client's host public key
In publickey authentication, the server compares the SSH username and client's host public key that it
receives from the client with the locally saved SSH username and the client's host public key. If they are
the same, the server checks the digital signature that the client sends. The client generates the digital
signature by using the private key that is associated with the client's host public key.
For publickey authentication, password-publickey authentication, or any authentication, you must
perform the following tasks:
1.
Configure the client's DSA, RSA, or ECDSA host public key on the server.
HP recommends that you configure no more than 20 SSH client host public keys on an SSH server.
2.
Specify the associated host private key on the client to generate the digital signature.
If the device acts as an SSH client, specify the public key algorithm on the client. The algorithm
determines the associated host private key for generating the digital signature.
You can enter the content of a client's host public key or import the client's host public key from the public
key file. HP recommends that you import the client's host public key.
Entering a client's host public key
Before you enter the client's host public key, you must use the
display public-key local public
command
on the client to obtain the client's host public key.
To enter a client's host public key:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter public key view.
public-key peer
keyname
N/A
3.
Configure a client's host
public key.
Enter the content of the host public
key
The host public key must be in the
DER encoding format without
being converted.
When you enter the contents for a
host public key, you can use
spaces and carriage returns
between characters. When you
save the host public key, spaces
and carriage returns are removed
automatically.
For more information, see
"
."
4.
Return to system view.
peer-public-key
end
N/A
