3Com 4210 PWR - Configuring the SSH Server

390 CHAPTER 36: SSH CONFIGURATION
and goes on to the interactive session stage with the client. Otherwise, the server
sends back to the client an SSH_SMSG_FAILURE packet, indicating that the
processing fails or it cannot resolve the request. The client sends a session request
to the server, which processes the request and establishes a session.
Data exchange
In this stage, the server and the client exchanges data in this way:
■ The client encrypts and sends the command to be executed to the server.
■ The server decrypts and executes the command, and then encrypts and sends
the result to the client.
■ The client decrypts and displays the result on the terminal.
Configuring the SSH
Server
You must perform necessary configurations on the SSH server for SSH clients to
access.
SSH Server
Configuration Tasks
Configuring the Protocol
Support for the User
Interface
You must configure the supported protocol(s) for SSH remote login. Note that the
configuration does not take effect immediately, but will be effective for
subsequent login requests.
Tabl e 299 SSH server configuration tasks
Tasks Description
Configuring
the SSH server
Configuring the Protocol
Support for the User Interface
Required
Generating/Destroying a RSA
or DSA Key Pair
Required
Exporting the RSA or DSA
Public Key
Optional
Creating an SSH User and
Specify an Authentication Type
Required
Specifying a Service Type for
an SSH User
Optional
Configuring SSH Management Optional
Configuring the Client Public
Key on the Server
Required for pubilckey authentication;
unnecessary for password authentication
Assigning a Public Key to an
SSH User
Required for pubilckey authentication;
unnecessary for password authentication
Tabl e 300 Configure the protocol(s) that a user interface supports
Operation Command Description
Enter system view system-view -
Enter the view of one or
multiple user interfaces
user-interface [ type ]
first-number [ last-number ]
-
Configure the authentication
mode as scheme
authentication-mode
scheme [
command-authorization ]
Required
By default, the user interface
authentication mode is
password