H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 626)

64-21
[AC-pkey-key-code]B374E16DD00132CE71B020217091AC717B612391C76C1FB2E
88317C1BD8171D41ECB83E210C03CC9
[AC-pkey-key-code]B32E810561C21621C73D6DAAC028F4B1585DA7F42519718CC
9B09EEF0381840002818000AF995917
[AC-pkey-key-code]E1E570A3F6B1C2411948B3B4FFA256699B3BF871221CC9C5D
F257523777D033BEE77FC378145F2AD
[AC-pkey-key-code]D716D7DB9FCABB4ADBF6FB4FDB0CA25C761B308EF53009F71
01F7C62621216D5A572C379A32AC290
[AC-pkey-key-code]E55B394A217DA38B65B77F0185C8DB8095522D1EF044B465E
8716261214A5A3B493E866991113B2D
[AC-pkey-key-code]485348
[AC-pkey-key-code] public-key-code end
[AC-pkey-public-key] peer-public-key end
# Specify the host public key for the SSH server (10.165.87.136) as “key1”.
[AC] ssh client authentication server 10.165.87.136 assign publickey key1
[AC] quit
# Establish an SSH connection to server 10.165.87.136.
<AC> ssh2 10.165.87.136
Username: client001
Trying 10.165.87.136
Press CTRL+K to abort
Connected to 10.165.87.136...
Enter password:
**************************************************************************
* Copyright (c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.*
* Without the owner's prior written consent, *
* no decompiling or reverse-engineering shall be allowed. *
**************************************************************************
<Switch>
When Using Publickey Authentication
Network requirements
z
As shown in Figure 64-12 , AC (the SSH client) needs to log on to Switch (the SSH server) through
SSH protocol.
z
Publickey authentication is used; the algorithm is DSA.
Network diagram
Figure 64-12 Network diagram of SSH client configuration (using publickey authentication)
SSH client SSH server
AC Switch
Vlan-int1
10.165.87.136/24
Vlan-int1
10.165.87.137/24
Configuration procedure
1) Configure the SSH server
# Generate RSA and DSA key pairs and enable SSH server.