Configuring the Device as an SSH Server 1111
n
As a client uses either RSA or DSA algorithm for authentication and different
clients may support different algorithms, the server needs to generate both RSA
and DSA key pairs for successful authentication.
Enabling SSH Server Follow these steps to enable SSH server:
Configuring the User
Interfaces for SSH
Clients
An SSH client accesses the device through a VTY user interface. Therefore, you
need to configure the user interfaces for SSH clients to allow SSH login. Note that
the configuration takes effect at the next login.
Follow these steps to configure the protocols for the current user interface to
support:
c
CAUTION:
■ For detailed information about the authentication-mode and protocol
inbound commands, refer to “Logging In to an Ethernet Switch” on page 27.
■ If you configure a user interface to support SSH, be sure to configure the
corresponding authentication method with the authentication-mode
scheme command.
■ For a user interface configured to support SSH, you cannot configure the
authentication-mode password command and the authentication-mode
none command.
Configuring RSA and
DSA Keys
Creating RSA or DSA key pairs
For successful SSH login, you must create the RSA or DSA key pairs first.
Follow these steps to create an RSA or DSA key pair:
“Setting the SSH Management Parameters” on page 1115 Optional
Task Remarks
To do… Use the command… Remarks
Enter system view system-view -
Enable the SSH server
function
ssh server enable Required
Disabled by default
To do… Use the command… Remarks
Enter system view system-view -
Enter user interface view of
one or more user interfaces
user-interface vty number
[ ending-number ]
Required
Set the login authentication
method to scheme
authentication-mode scheme
[ command-authorization ]
Required
By default, the
authentication mode is
password.
Specify the protocols for the
user interfaces to support
protocol inbound { all | ssh |
telnet }
Optional
All protocols are supported
by default.
To Next Page
Loading...
