H3C S3100 8C SI User Manual

Operation Manual – SSH
H3C S3100 Series Ethernet Switches Chapter 1 SSH Configuration
1-24
To do... Use the command... Remarks
Configure server public
key
Refer to
Configuring the
Public Key of a Client on
the Server
Required
The method of configuring
server public key on the
client is similar to that of
configuring client public
key on the server.
Specify the host key name
of the server
ssh client { server-ip |
server-name } assign
publickey keyname
Required
III. Establishing the connection between the SSH client and server
The client’s method of establishing an SSH connection to the SSH server varies with
authentication types.
Table 1-17 Follow these steps to establish an SSH connection:
To do... Use the command... Remarks
Enter system view
system-view
—
Start the client to
establish a
connection with an
SSH server
ssh2 { host-ip |
host-name } [ port-num ]
[ identity-key { dsa | rsa }
| prefer_kex
{ dh_group1 |
dh_exchange_group } |
prefer_ctos_cipher
{ des | aes128 } |
prefer_stoc_cipher
{ des | aes128 } |
prefer_ctos_hmac
{ sha1 | sha1_96 | md5 |
md5_96 } |
prefer_stoc_hmac
{ sha1 | sha1_96 | md5 |
md5_96 } ] *
Required
In this command, you can also
specify the preferred key
exchange algorithm, encryption
algorithms and HMAC algorithms
between the server and client.
HMAC: Hash-based message
authentication code
Note that:
The identity-key keyword is
unnecessary in password
authentication and optional in
public key authentication.
 Note:
When logging into the SSH server using public key authentication, an SSH client needs
to read its local private key for authentication. As two algorithms (RSA or DSA) are
available, the identity-key keyword must be used to specify one algorithm in order to
get the correct private key.

H3C S3100 8C SI Specifications

General

Brand	H3C
Model	S3100 8C SI
Category	Switch
Language	English