355
•
The preferred server-to-client encryption algorithm is
aes128
.
•
The preferred client-to-server HMAC algorithm is
md5
.
•
The preferred server-to-client HMAC algorithm is
sha1-96
.
<Sysname> sftp ipv6 2:5::8:9 prefer-kex dh-group1 prefer-stoc-cipher aes128
prefer-ctos-hmac md5 prefer-stoc-hmac sha1-96
Input Username:
ssh client authentication server
Use
ssh client authentication server
on the client to configure the host public key of the specified
server so that the client can determine whether the server is trustworthy.
Use
undo ssh client authentication server
to remove the configuration.
Syntax
ssh client authentication server
server
assign
publickey
keyname
undo ssh client authentication server
server
assign publickey
Default
No host public key of a server is configured. When the client logs into a server, it uses the IP address
or host name of the server as the public key name.
Views
System view
Default command level
2: System level
Parameters
server
: IP address or name of the server, a string of 1 to 80 characters.
assign
publickey
keyname
: Specifies the name of the host public key of the server, a string of 1 to
64 characters.
Usage guidelines
If the client does not support first-time authentication, it will reject unauthenticated servers. In this
case, you need to configure the public keys of the servers and specify the mappings between public
keys and servers on the client, so that the client uses the correct public key of a server to
authenticate the server.
The specified host public key of the server must already exist.
Examples
# Configure the public key of the server at
192.168.0.1
to be
key1
.
<Sysname> system-view
[Sysname] ssh client authentication server 192.168.0.1 assign publickey key1
Related commands
ssh client first-time enable
ssh client first-time enable
Use
ssh client first-time enable
to enable the first-time authentication function.
Use
undo ssh client first-time
to disable the function.
