Name and password of the local user are created.
Step 4
Run:
quit
Quit the AAA view.
Step 5
Run:
rsa local-key-pair create
A local RSA key pair is generated.
NOTE
l
Before performing the other SSH configurations, you must configure the
rsa local-key-pair create
command to generate a local key pair.
l
After generating the local key pair,you can perform the
display rsa local-key-pair public
command
to view the public key in the local key pair.
Step 6
Run:
ssh user
user-name
authentication-type
{
password
|
rsa
|
password-rsa
|
all
}
The authentication mode for SSH users is configured.
Perform the following as required:
l
Authenticate the SSH user through the password.
–
Run:
ssh user
user-name
authentication-type
password
The password authentication is configured for the SSH user.
l
Authenticate the SSH user through RSA.
1.
Run:
ssh user
user-name
authentication-type
rsa
The RSA authentication is configured for the SSH user.
2.
Run:
rsa peer-public-key
key-name
The public key view is displayed.
3.
Run:
public-key-code begin
The public key editing view is displayed.
4.
Run:
hex-data
The public key is edited.
NOTE
l
In the public key view, only hexadecimal strings complying with the public key format can be
typed in. Each string is randomly generated on an SSH client. For detailed operations, see manuals
for SSH client software.
l
After the public key editing view is displayed, the RSA public key generated on the client can
be sent to the server. Copy the RSA public key to the router that serves as the SSH server.
5.
Run:
public-key-code end
Huawei AR2200 Series Enterprise Routers
Configuration Guide - Basic Configuration
5 Configuring User Login
Issue 02 (2011-10-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
68
