1112 CHAPTER 88: SSH CONFIGURATION
c
CAUTION:
■ Configuration of the rsa local-key-pair create and public-key local create
dsa command can survive a reboot. You only need to configure it once.
■ The length of an RSA server/host key is in the range 512 to 2048 bits. With
SSH2, however, some clients require that the keys generated by the server
must not be less than 768 bits.
■ The length of a DSA host key is in the range 512 to 2048 bits. With SSH2,
nevertheless, some clients require that the keys generated by the server must
not be less than 768 bits.
Exporting RSA or DSA key pairs
You can display or export the local RSA or DSA host key for setting the host key on
the remote end.
Follow these steps to display or export an RSA or DSA host key:
Destroying RSA or DSA key pairs
Follow these steps to destroy an RSA or DSA key pair:
Configuring a Client
Public Key
n
This configuration task is only necessary for SSH users using publickey
authentication.
To do… Use the command… Remarks
Enter system view system-view -
Create the local RSA key pair public-key local create rsa Required
Use either command.
By default, there is neither RSA
key pair nor DSA key pair.
Create the local DSA key pair public-key local create dsa
To do… Use the command… Remarks
Enter system view system-view -
Display the local RSA host key on the
screen in a specified format, or export it
to a specified file
public-key local export rsa
{ openssh | ssh1 | ssh2 }
[ filename ]
Required
Use either
command.
Display the local DSA host key on the
screen in a specified format, or export it
to a specified file
public-key local export dsa
{ openssh | ssh2 } [ filename ]
To do… Use the command… Remarks
Enter system view system-view -
Destroy the local RSA key pair public-key local destroy rsa Required
Use either command. Destroy the local DSA key pair public-key local destroy
dsa
To Next Page
Loading...
