H3C S3600 Series User Manual

Operation Manual – SSH Terminal Service
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
SSH Terminal Service
1-9
Table 1-6 Configure SSH management
Operation Command Description
Enter system view
system-view
—
Set SSH
authentication
timeout time
ssh server timeout
seconds
Optional
By default, the timeout time is 60
seconds.
Set SSH
authentication retry
times
ssh server
authentication-retri
es times
Optional
By default, the number of retry times
is 3.
Set server key
update interval
ssh server
rekey-interval hours
Optional
By default, the system does not
update server keys.
Configure SSH
server to be
compatible with
SSH1.x clients
ssh server
compatible-ssh1x
enable
Optional
By default, SSH server is
compatible with SSH1.x clients.
VI. Configuring a client public key for a user
On the switch, you can configure a client public key (generated randomly on a client) for
a client user. This configuration is not required for password authentication type.
There are two methods to configure a client public key for a user.
1) Manual configuration
First, perform the following operations on a client:
z Use the SSH1.5/2.0 client software to randomly generate a RSA key pair.
z Use the SSHKEY.exe program to transform the public key in the RSA key pair to
PKCS (public-key cryptography standards) format.
Then, perform the following operations on the server:
Table 1-7 Configure client public key for a user
Operation Command Description
Enter system view
system-view
—
Enter public key view
rsa peer-public-key
keyname
Required
Enter public key edit
view to input a client
public key
public-key-code begin
—

H3C S3600 Series Specifications

General

Brand	H3C
Model	S3600 Series
Category	Switch
Language	English