Huawei Quidway NetEngine80, Руководство по настройке

Страница: 182 / 265

Quidway NetEngine80
Configuration Guide - Basic Configurations
9 Telnet and SSH
Issue 04 (2009-12-20) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9-21
No. Procedure
3 Enabling the STelnet Client
4 Checking the Configuration
9.5.2 Enabling the First-Time Authentication on the SSH Client
Do as follows on the router that serves as an SSH client:
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
ssh client first-time enable
The first-time authentication on the SSH client is enabled.
----End
z
The purpose of enabling the first-time authentication on the SSH client is to skip checking whether
the RSA public key of the SSH server is valid when the STelnet or SFTP client logs in to the SSH
server for the first time. The check is skipped because the STelnet or SFTP server has not saved the
RSA public key of the SSH server at this time.
z
If the first-time authentication is not enabled on the SSH client, when the STelnet or SFTP client
logs in to the SSH server for the first time, the STelnet or SFTP client fails to pass the check on the
RSA public key validity and cannot log in to the server.
Except for enabling the first-time authentication on the SSH client, the STelnet or SFTP client can assign
the RSA public key in advance to the SSH server on the SSH client to log in to the server successfully
for the first time.
9.5.3 (Optional) Configuring the SSH Client to Assign the RSA
Public Key to the SSH Server
Do as follows on the router that serves as the SSH client:
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ssh client servername assign rsa-key keyname
The RSA public key is assigned to the SSH server.
----End