Operation Manual – SSH
H3C S3100 Series Ethernet Switches Chapter 1 SSH Configuration
1-26
Operation Original commands Current commands
Specify on the client
the host public key of
the server to be
connected
ssh client { server-ip |
server-name } assign
rsa-key keyname
ssh client { server-ip |
server-name } assign
publickey keyname
Assign a public key to
an SSH user
ssh user username assign
rsa-key keyname
ssh user username
assign publickey
keyname
Create an SSH user
and specify pubblickey
authentication as its
authentication type
ssh user username
authentication-type rsa
ssh user username
authentication-type
publickey
 Note:
z After the RSA key pair is generated, the display rsa local-key-pair public
command displays two public keys (the host public key and server public key) when
the S3100-EI switch is working in SSH1-compatible mode, but only one public key
(the host public key) when the switch is working in SSH2 mode.
z The result of the display rsa local-key-pair public command or the public key
converted with the SSHKEY tool contains no information such as the authentication
type, so they cannot be directly used as parameters in the public-key peer
command. For the same reason, neither can the result of the display public-key
local rsa public command be used in the rsa peer-public-key command directly.
1.7 SSH Configuration Examples
1.7.1 When Switch Acts as Server for Local Password Authentication
I. Network requirements
As shown in Figure 1-10, establish an SSH connection between the host (SSH Client)
and the switch (SSH Server) for secure data exchange. The host runs SSH2.0 client
software. Password authentication is required.
II. Network diagram
Figure 1-10 Switch acts as server for local password authentication