Step 5 Run:
rsa local-key-pair create
A local RSA key pair is generated.
NOTE
l Before performing other SSH configurations, run the rsa local-key-pair create command to generate
a local key pair.
l After generating the local key pair, you can perform the display rsa local-key-pair public command
to view the public key in the local key pair.
Step 6 Configure an authentication mode for SSH users.
Perform either of the following operations as needed.
l Authenticate SSH users using passwords.
– Run:
ssh user user-name authentication-type password
Password authentication is configured for SSH users.
In local authentication or HWTACACS authentication, if there are a large number of
users, authenticate SSH users using passwords. This reduces the configuration.
l Authenticate SSH users through RSA.
1. Run:
ssh user user-name authentication-type rsa
RSA authentication is configured for SSH users.
2. Run:
rsa peer-public-key key-name
The public key view is displayed.
3. Run:
public-key-code begin
The public key editing view is displayed.
4. Run:
hex-data
The public key is edited.
NOTE
l In the public key view, only hexadecimal strings complying with the public key format can be
typed in. Each string is randomly generated on an SSH client. For detailed operations, see manuals
for SSH client software.
l After the public key editing view is displayed, the RSA public key generated on the client can
be sent to the server. Copy the RSA public key to the router that serves as the SSH server.
5. Run:
public-key-code end
Quit the public key editing view.
l If the specified hex-data is invalid, the public key cannot be generated after the peer-
public-key end command is run.
Huawei AR1200 Series Enterprise Routers
Configuration Guide - Basic Configuration 6 Managing the File System
Issue 04 (2012-05-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
120
To Next Page
Loading...
