Huawei Quidway S3000-EI Series, Руководство по эксплуатации

Страница: 367 / 392

Operation Manual - System Management
Quidway S3000-EI Series Ethernet Switches
Chapter 8 SSH Terminal Services
Huawei Technologies Proprietary
8-3
z
Setting system protocol and link maximum
z
Configuring and deleting local RSA key pair
z
Configuring authentication type
z
Defining update interval of server key
z
Defining SSH authentication timeout value
z
Defining SSH authentication retry value
z
Entering public key view and editing public key
z
Associating public key with SSH user
I. Setting system protocol
By default, the system only supports Telnet protocol, so you must specify SSH protocol
for the system before enabling SSH.
Please perform the following configuration in system view.
Table 8-1 Setting system protocols and link maximum
Operation Command
Set system protocol and link
maximum
protocol inbound { all | ssh | telnet }
Caution:
If SSH protocol is specified, to ensure a successful login, you must configure the AAA
authentication using the authentication-mode scheme command. The protocol
inbound ssh configuration fails if you configure authentication-mode password and
authentication-mode none . When you configure SSH protocol successfully for the
user interface, then you cannot configure authentication-mode password and
authentication-mode none any more.
II. Configuring and canceling local RSA key pair
In executing this command, if you have configured RSA host key pair, the system gives
an alarm after using this command and prompts that the existing one will be replaced.
The server key pair is created dynamically by SSH server. The maximum bit range of
both key pairs is 2048 bits and the minimum is 512.
Please perform the following configurations in system view.