Huawei Quidway S5600 Series User Manual

Operation Manual - SSH Terminal Services
Quidway S5600 Series Ethernet Switches-Release 1510 Chapter 1
SSH Terminal Services
Huawei Technologies Proprietary
1-5
Caution:
z When SSH protocol is specified, to ensure a successful login, you must configure
the AAA authentication using the authentication-mode scheme command.
z The protocol inbound ssh configuration fails if you configured
authentication-mode password or authentication-mode none. When you
configure SSH protocol successfully for the user interface, then you cannot
configure authentication-mode password or authentication-mode none any
more.
II. Generating or destroying RSA key pairs
This configuration task is used to generate or destroy the server RSA key pair. The
name of the server RSA key pair is in the format of switch name plus _Host, and switch
name plus _Server, Quidway_Host and Quidway_Server for example.
After you input the rsa local-key-pair command, the system prompts you to define the
key length.
z In SSHv1.x, the key length is in the range of 512 to 2,048 (bits).
z In SSHv2.0, the key length is in the range of 1024 to 2048 (bits). To make SSH 1.x
compatible, 512- to 2,048-bit keys are allowed on clients, but the length of server
keys must be more than 1,024 bits. Otherwise, clients cannot be authenticated.
Table 1-3 Generate or destroy RSA key pairs
Operation Command Description
Enter system view
system-view
—
Generate a local RSA key pair
rsa local-key-pair create
Required
Destroy a local RSA key pair
rsa local-key-pair destroy
Optional

Huawei Quidway S5600 Series Specifications

General

Brand	Huawei
Model	Quidway S5600 Series
Category	Switch
Language	English