Step 4
Run:
rsa local-key-pair create
A local RSA key pair is generated.
NOTE
l
Before performing the other SSH configurations, you must configure the
rsa local-key-pair create
command to generate a local key pair.
l
After generating the local key pair,you can perform the
display rsa local-key-pair public
command
to view the public key in the local key pair.
Step 5
Run:
ssh user
user-name
authentication-type
{
password
|
rsa
|
password-rsa
|
all
}
The authentication mode for SSH users is configured.
Perform the following as required:
l
Authenticate the SSH user through the password.
–
Run:
ssh user
user-name
authentication-type
password
The password authentication is configured for the SSH user.
l
Authenticate the SSH user through RSA.
1.
Run:
ssh user
user-name
authentication-type
rsa
The RSA authentication is configured for the SSH user.
2.
Run:
rsa peer-public-key
key-name
The public key view is displayed.
3.
Run:
public-key-code begin
The public key editing view is displayed.
4.
Run:
hex-data
The public key is edited.
NOTE
l
In the public key view, only hexadecimal strings complying with the public key format can be
typed in. Each string is randomly generated on an SSH client. For detailed operations, see manuals
for SSH client software.
l
After the public key editing view is displayed, the RSA public key generated on the client can
be sent to the server. Copy the RSA public key to the router that serves as the SSH server.
5.
Run:
public-key-code end
Quit the public key editing view.
l
If the specified
hex-data
is invalid, the public key cannot be generated after the
peer-
public-key end
command is run.
Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
6 Managing File System
Issue 02 (2011-10-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
100
