1110 CHAPTER 88: SSH CONFIGURATION
■ password-publickey: Performs both password authentication and publickey 
authentication of the client. A client running SSH1 client only needs to pass 
either type of the two, while a client running SSH2 client must pass both of 
them to login.
■ any: Performs either password authentication or publickey authentication. The 
client tries publickey authentication first.
Session request
After passing authentication, the client sends a session request to the server, while 
the server listens to and processes the request from the client. If the client passes 
authentication, the server sends back to the client an SSH_SMSG_SUCCESS packet 
and goes on to the interactive session stage with the client. Otherwise, the server 
sends back to the client an SSH_SMSG_FAILURE packet, indicating that the 
processing fails or it cannot resolve the request.
Interactive session
In this stage, the server and the client exchanges data in this way:
■ The client encrypts and sends the command to be executed to the server.
■ The server decrypts and executes the command, and then encrypts and sends 
the result to the client.
■ The client decrypts and displays the result on the terminal.
n
■ During interactive session, the client can send the commands to be performed 
by pasting the text, which must be within 2000 bytes. It is recommended that 
the text pasted be commands in the same view; otherwise, the server may not 
be able to perform the commands.
■ If the text exceeds 2000 bytes, you can upload the configuration file to the 
server and use the configuration file to restart the server so that the server 
executes the commands.
Configuring the 
Device as an SSH 
Server
SSH Server
Configuration Task List
Complete the following tasks to configure an SSH server:
Task Remarks 
“Enabling SSH Server” on page 1111 Required 
“Configuring the User Interfaces for SSH Clients” on page 1111 Required 
“Configuring 
RSA and DSA 
Keys” on page 
1111 
“Creating RSA or DSA key pairs” on page 1111  Required 
“Exporting RSA or DSA key pairs” on page 1112  Optional 
“Destroying RSA or DSA key pairs” on page 1112  Optional 
“Configuring a Client Public Key” on page 1112 Required for publickey 
authentication users 
and optional for 
password 
authentication users 
“Configuring an SSH User” on page 1113 Optional