Generating the host key pair, Figure 190 confi – Brocade Communications Systems Brocate Ethernet Access Switch 6910 User Manual

Page 903

Advertising
background image

Brocade 6910 Ethernet Access Switch Configuration Guide

853

53-1002581-01

Configuring Secure Shell

41

FIGURE 190

Configuring the SSH Server

Generating the Host Key Pair

Use the Security > SSH (Configure Host Key - Generate) page to generate a host public/private key
pair used to provide secure communications between an SSH client and the switch. After
generating this key pair, you must provide the host public key to SSH clients and import the client’s
public key to the switch as described in the section

“Importing User Public Keys”

on page 854.

NOTE

A host key pair must be configured on the switch before you can enable the SSH server. See

“Configuring the SSH Server”

on page 852.

CLI References

“Secure Shell”

on page 166

Parameters

These parameters are displayed:

Host-Key Type – The key type used to generate the host key pair (i.e., public and private keys).
(Range: RSA (Version 1), DSA (Version 2), Both; Default: Both)

The SSH server uses RSA or DSA for key exchange when the client first establishes a
connection with the switch, and then negotiates with the client to select either DES (56-bit) or
3DES (168-bit) for data encryption.

NOTE

The switch uses only RSA Version 1 for SSHv1.5 clients and DSA Version 2 for SSHv2 clients.

Save Host-Key from Memory to Flash – Saves the host key from RAM (i.e., volatile memory) to
flash memory. Otherwise, the host key pair is stored to RAM by default. Note that you must
select this item prior to generating the host-key pair. (Default: Disabled)

Interface

To generate the SSH host key pair:

1. Click Security, SSH.

2. Select Configure Host Key from the Step list.

Advertising