H3C MSR Series Command Reference

440
If you do not assign the key pair a name, the system assigns the default name to the key pair and
marks the key pair as default. You can also assign the default name to another key pair, but the
system does not mark the key pair as default. The name of a key pair must be unique among all
manually named key pairs that use the same key algorithm. If a name conflict occurs, the system
asks whether you want to overwrite the existing key pair.
The key pairs are automatically saved and can survive system reboots.
Table 56 A comparison of different types of asymmetric key algorithms
Type
Generated key pairs
Modulus/key length
RSA
• In non-FIPS mode:
 One host key pair, if you specify a key
pair name.
 One server key pair and one host key
pair, if you do not specify a key pair
name.
Both key pairs use their default names.
• In FIPS mode: One host key pair.
NOTE:
Only SSH 1.5 uses the RSA server key pair.
• In non-FIPS mode: 512 to 2048 bits,
1024 bits by default.
To ensure security, use a minimum
of 768 bits.
• In FIPS mode: 2048 bits.
DSA One host key pair.
• In non-FIPS mode: 512 to 2048 bits,
1024 bits by default.
To ensure security, use a minimum
of 768 bits.
• In FIPS mode: 2048 bits.
ECDSA One host key pair.
• In non-FIPS mode: 192, 256, or 384
bits.
The default is 192 bits.
• In FIPS mode: 256 or 384 bits.
The default is 256 bits.
Examples
# Create local RSA key pairs with default names.
<Sysname> system-view
[Sysname] public-key local create rsa
The range of public key modulus is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...
...++++++
.++++++
..++++++++
....++++++++
Create the key pair successfully.
# Create a local DSA key pair with the default name.
<Sysname> system-view
[Sysname] public-key local create dsa
The range of public key modulus is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS