Ruijie RG-S29 Series, Справочник по командам

Страница: 1120 / 1510

Configuration Guide SSH Commands
11 SSH Commands
11.1 crypto key generate
Use this command to generate a public key to the SSH server.
crypto key generate { rsa | dsa }
Parameter
Description
Parameter Description
rsa Generates an RSA key.
dsa Generates a DSA key.
Defaults By default, the SSH server does not generate a public key.
Command
Mode
Global configuration mode
Usage Guide
When you need to enable the SSH SERVER service, use this command to generate a public key on
the SSH server and enable the SSH SERVER service by command enable service ssh-server at
the same time. SSH 1 uses the RSA key; SSH 2 uses the RSA or DSA key. Therefore, if a RSA key
has been generated, both SSH1 and SSH2 can use it. If only a DSA key is generated, only SSH2 can
use it.
Only DSA/RSA authentication is available for one connection. Also, the key algorithm may differ
in different client. Thus, it is recommended to generate both RSA and DSA keys so as to ensure
connection with the portal server.
RSA has a minimum modulus of 512 bits and a maximum modulus of 2,048 bits; DSA has a
minimum modulus of 360 bits and a maximum modulus of 2,048 bits. For some clients like SCP
clients, a 768-bit or more key is required. Thus, it is recommended to generate the key of 768
bits or more.
A key can be deleted by using the no crypto key generate command. The no crypto key
zeroize command is not available.
Configuration
Examples
The following example generates an RSA key to the SSH server.
Ruijie# configure terminal
Ruijie(con fig)# crypto key generate rsa
Related
Commands
Command Description
show ip ssh Displays the current status of the SSH server.
crypto key zeroize { rsa | dsa }
Deletes DSA and RSA keys and disables the SSH server
function.