Nortel 4050, Руководство пользователя

Страница: 487 / 922

Chapter 10 Configuring system settings 487
Nortel Secure Network Access Switch 4050 User Guide
Managing known hosts SSH keys using the CLI
You can paste or import public SSH keys from remote hosts as a convenience, so
that you do not get prompted to accept a new key during later use of SCP or SFTP
for file or data transfer.
To achieve strict “man in the middle” protection, verify the fingerprint before
applying the changes.
To manage the public SSH keys of known remote hosts, use the following
command:
/cfg/sys/adm/sshkeys/knownhosts
The SSH Known Host Keys menu displays.
The SSH Known Host Keys menu includes the following options:
/cfg/sys/adm/sshkeys/knownhosts
followed by:
list
Lists the type and fingerprint of the known SSH keys for
remote hosts, by index number.
del < index number >
Removes the specified known host SSH key.
To view the index numbers of all known host SSH keys,
use the
list command.
add
Allows you to paste in the contents of a key file you
have downloaded from the remote host.
When prompted, paste in the key, then press Enter .
Enter an elllipsis ( ... ) to signal the end of the key.
Valid formats are as described for the
/cfg/sys/adm/sshkeys/show command or the
native format used by the OpenSSH implementation.
If the key has a valid format, you will be prompted for
the corresponding host name or IP address. You can
provide a comma-separated list of names and
IP addresses for the host.
The system automatically assigns the next available
index number to the known host SSH key.
import < IPaddr >
Allows you to import an SSH key from a remote host.
• IPaddr — the IP address of the remote host
The system automatically assigns the next available
index number to the known host SSH key.