12-4
z Import it from the public key file: The system automatically converts the public key to a string
coded using the PKCS (Public Key Cryptography Standards). Before importing the public key, you
must upload the peer's public key file (in binary) to the local host through FTP or TFTP.
z If you choose to input the public key, the public key must be in a correct format. The key data
displayed by the display public-key local public command can be used to meet the format
requirements. The public key displayed in other methods may not meet the format requirements,
and the format-incompliant key cannot be saved. Thus, you are recommended to configure the
public key of the peer by importing it from a public key file.
z The device supports up to 20 host pubic keys of peers.
Follow these steps to configure the public key of a peer manually:
To do… Use the command… Remarks
Enter system view system-view —
Enter public key view public-key peer keyname —
Enter public key code view public-key-code begin —
Configure a public key of the
peer
Type or copy the key
Required
Spaces and carriage returns
are allowed between
characters.
Return to public key view public-key-code end
—
When you exit public key code
view, the system automatically
saves the public key.
Return to system view peer-public-key end —
Follow these steps to import the host public key of a peer from the public key file:
To do… Use the command… Remarks
Enter system view system-view —
Import the host public key of a
peer from the public key file
public-key peer keyname
import sshkey filename
Required
Displaying and Maintaining Public Keys
To do… Use the command… Remarks
Display the public keys of the
local key pairs
display public-key local { dsa
| rsa } public
Display the public keys of the
peers
display public-key peer
[ brief | name publickey-name ]
Available in any view
To Next Page
Loading...
