UMN:CLI User Manual
V5808
90
ssh keygen {rsa1 | rsa | dsa}
Configures an authentication key.
rsa1: SSH ver. 1 authentication
rsa: SSH ver. 2 authentication
dsa: SSH ver. 2 authentication
FILENAME: key file name
copy {scp | sftp} key upload
FILENAME
To configure authentication key and connect to SSH server with the authentication key,
perform the following procedure:
Step 1 Configure the authentication key in the switch.
SWITCH_A(config)# ssh keygen dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/etc/.ssh/id_dsa):
Enter passphrase (empty for no passphrase):networks
Enter same passphrase again:networks
Your identification has been saved in /etc/.ssh/id_dsa.
Your public key has been saved in /etc/.ssh/id_dsa.pub.
The key fingerprint is:
d9:26:8e:3d:fa:06:31:95:f8:fe:f6:59:24:42:47:7e root@V5808
SWITCH_A(config)#
Step 2 Copy the generated authentication key to SSH server.
Step 3 Connect to SSH server with the authentication key.
SWITCH_A(config)# ssh login 172.16.209.10
Enter passphrase for key '/etc/.ssh/id_dsa': networks
SWITCH_B#
4.6 802.1x Authentication
To enhance security and portability of network management, there are two ways of
authentication based on MAC address and port-based authentication which restrict clients
attempting to access to port.
Port-based authentication (802.1x) is used to authenticate the port self to access without
users’ count to access the network.
802.1x authentication adopts EAP (Extensible Authentication Protocol) structure. In EAP
system, there are EAP-MD5 (Message Digest 5), EAP-TLS (Transport Level Security),