H3C S5100-SI

1-23
When logging into the SSH server using public key authentication, an SSH client needs to read its local
private key for authentication. As two algorithms (RSA or DSA) are available, the identity-key keyword
must be used to specify one algorithm in order to get the correct private key.
Displaying and Maintaining SSH Configuration
To do... Use the command... Remarks
Display the public key
information of the current
switch’s key pairs
display public-key local { dsa | rsa }
public
Display information about
locally saved public keys of
SSH peers
display public-key peer [ brief | name
pubkey-name ]
Display information about SSH
status and about sessions of
active connections with SSH
clients
display ssh server { session | status }
Display information about all
SSH users
display ssh user-information
[ username ]
Display the current source IP
address or the IP address of
the source interface specified
for the SSH server.
display ssh-server source-ip
Display the mappings between
host public keys and SSH
servers saved on a client
display ssh server-info
Display the current source IP
address or the IP address of
the source interface specified
for the SSH Client.
display ssh2 source-ip
Available in any view
Comparison of SSH Commands with the Same Functions
After the SSH protocol supports the DSA asymmetric key algorithm, some SSH configuration
commands are changed. For the sake of SSH configuration compatibility, the original commands are
still supported.
Table 1-18 lists both the original commands and current commands.
Table 1-18 List of SSH configuration commands with the same functions
Operation Original commands Current commands
Display local RSA public
keys
display rsa local-key-pair public
display public-key local rsa
public
Display information about
the peer RSA public keys
display rsa peer-public-key
[ brief | name keyname ]
display public-key peer [ brief |
name pubkey-name ]