1-10
z If you have configured a user interface to support SSH protocol, to ensure a successful login to the
user interface, you must configure AAA authentication for the user interface by using the
authentication-mode scheme command.
z For a user interface, if you have executed the authentication-mode password or
authentication-mode none command, the protocol inbound ssh command cannot be executed;
if you have executed the protocol inbound ssh command, neither of the authentication-mode
password and authentication-mode none commands can be executed.
Examples
# Configure vty0 through vty4 to support SSH only.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] authentication-mode scheme
[Sysname-ui-vty0-4] protocol inbound ssh
public-key local create
Syntax
public-key local create rsa
View
System view
Parameters
rsa: Specifies the RSA key pair.
Description
Use the public-key local create command to create a local RSA key pair.
Note that:
z Generating the RSA key pair on the server is prerequisite to SSH login.
z After entering this command, you will be prompted to provide the length of the key modulus. The
length is in the range 512 to 2048 bits and defaults to 1024 bits. If the key pair already exists, the
system will ask you whether you want to overwrite it.
z The key pair created by this command can survive a reboot. You only need to configure it once.
Related commands: public-key local destroy, display public-key local.
Examples
# Create local RSA key pair.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] public-key local create rsa