Huawei Quidway S3500 Series, Руководство по эксплуатации

Страница: 645 / 671

Operation Manual - System Management
Quidway S3500 Series Ethernet Switches
Chapter 8 SSH Terminal Services
Huawei Technologies Proprietary
8-4
The server key pair is created dynamically by SSH server. The maximum bit range of
both key pairs is 2048 bits and the minimum is 512.
Please perform the following configurations in system view.
Table 8-2 Configuring and canceling local RSA key pair
Operation Command
Configure local RSA key pair rsa local-key-pair create
Cancel local RSA key pair
rsa local-key-pair destroy
Caution:
For a successful SSH login, you must configure and generate the local RSA key pairs.
To generate local key pairs, you just need to execute the command once, with no
further action required even after the system is rebooted.
III. Configuring authentication type
For a new user, you must specify authentication type. Otherwise, he/she cannot access
the switch.
Please perform the following configurations in system view.
Table 8-3 Configuring authentication type
Operation Command
Configure authentication type
ssh user username authentication-type
{ password | rsa | all }
Remove authentication type
setting
undo ssh user username authentication-type
If the configuration is RSA authentication type, then the RSA public key of client user
must be configured on the switch, that is to perform the 7 and 8 serial number marked
configuration.
By default, no authentication type is specified for a new user, so he/she cannot access
the switch.
IV. Defining update interval of server key
Please perform the following configurations in system view.