LevelOne FGL-2870 - Manual (Page 149)

User Authentication
3-95
3
Importing User Public Keys
A user’s Public Key must be uploaded to the switch in order for the user to be able to
log in using the public key authentication mechanism. If the user’s public key does
not exist on the switch, SSH will revert to the interactive password authentication
mechanism to complete authentication.
Field Attributes
• Public-Key of user – The RSA and DSA public keys for the selected user.
- RSA: The first field indicates the size of the host key (e.g., 1024), the second
field is the encoded public exponent (e.g., 37), and the last string is the encoded
modulus.
- DSA: The first field indicates that SSH version 2 was used to create the key. The
second field contains the key comment. The third string is the encoded modulus,
and the last field is a comment denoting the end of the key.
• User Name – This drop-down box selects the user who’s public key you wish to
manage. Note that you must first create users on the User Accounts page (See
’Configuring User Accounts" on page 3-70).
• Public-Key Type – The type of public key to upload.
- RSA: The switch accepts a RSA version 1 encrypted public key.
- DSA: The switch accepts a DSA version 2 encrypted public key.
The SSH server uses RSA or DSA for key exchange when the client first
establishes a connection with the switch, and then negotiates with the client to
select either DES (56-bit) or 3DES (168-bit) for data encryption.
The switch uses only RSA Version 1 for SSHv1.5 clients and DSA Version 2 for
SSHv2 clients.
• TFTP Server IP Address – The IP address of the TFTP server that contains the
public key file you wish to import. (Default: 0.0.0.0)
• Source File Name – The public key file to upload.
• Copy Public Key – Initiates the public key TFTP import process. If you are
replacing an outdated public key file, it is not necessary to first delete the original
key from the switch. The import process will overwrite the existing key.
• Delete – Deletes a selected RSA or DSA public key that has already been imported
to the switch.