H3C MSR Series Command Reference

690
service-type: Specifies a service type for the SSH user.
• all: Specifies service types Stelnet, SFTP, SCP, and NETCONF.
• scp: Specifies the service type SCP.
• sftp: Specifies the service type SFTP.
• stelnet: Specifies the service type Stelnet.
• netconf: Specifies the service type NETCONF.
authentication-type: Specifies an authentication method for the SSH user.
• password: Specifies password authentication. This authentication method provides easy and
fast encryption, but it is vulnerable. It can work with AAA to implement user authentication,
authorization, and accounting.
• any: Specifies either password authentication or publickey authentication.
• password-publickey: Specifies both password authentication and publickey authentication for
SSH2 clients. In SSH2, the password-publickey authentication method provides higher
security. If the client runs SSH1, this keyword specifies either password authentication or
publickey authentication.
• publickey: Specifies publickey authentication. This authentication method has complicated
and slow encryption, but it provides strong authentication that can defend against brute-force
attacks. This authentication method is easy to use. If this method is configured, the
authentication process completes automatically without entering any password.
assign: Specifies parameters used for client verification.
• pki-domain domain-name: Specifies the PKI domain that verifies the client's digital certificate.
The domain-name argument is a case-insensitive string of 1 to 31 characters, excluding
characters listed in
Table 102. The server uses the CA certificate that is saved in the PKI
domain to verify the client's digital certificate. In this scenario, the server does not need to save
clients' public keys in advance.
Table 102 Invalid characters for a PKI domain name
Character name
Symbol
Character name
Symbol
Tilde ~ Dot .
Asterisk * Left angle bracket <
Backslash \ Right angle bracket >
Vertical bar | Quotation marks "
Colon : Apostrophe '
• publickey keyname: Specifies the public key of the SSH client. The keyname argument
represents the SSH client's public key configured on the server. It is a case-insensitive string of
1 to 64 characters. The server uses the client's public key to check the validity of the client. If the
public key file of the client is changed, you must update the client's public key on the server
promptly.
Usage guidelines
Use this command to configure an SSH user depending on the authentication method.
• If the authentication method is publickey, you must create an SSH user and a local user on the
SSH server. The two users must have the same username, so that the SSH user can be
assigned the correct working directory and user role.
• If the authentication method is password, you must perform one of the following tasks:
 For local authentication, configure a local user on the SSH server.
 For remote authentication, configure an SSH user on a remote authentication server, for
example, a RADIUS server.

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS