To do…
Use the command…
Remarks
Destroy the RSA key pair
public-key local destroy
rsa
Optional
ing an Authentication Type
This task is to create an SSH user and specify an authentication type. Specifying an authentication type
for a new user is a must to get the user login.
Creating an SSH User and Specify
r attributes on the SSH server. This set is uniquely identified
odes of
password, pu
nd password-publ
z
ntication
SSH uses the authentication function of
sswo
gging in.
Base
can b
. For
l
ation and im
or
r
authentication, the user info
saved on an authentic
as a RADIUS
server) and authentication is imp
e cooperati
the
authentication server. For AAA details, refer to
AAA Operation
.
z
Publickey authentication provides
ha
does.
At present, the device supports RSA for publickey authentication. Aft
is
plemented automatically without asking you to enter the password. In this mode, you need to create a
key pair on each client, and configure each client's public key on the server. This may be complicated
when multiple SSH clients want to access one SSH server in the network.
z
Password-publickey authentication
An SSH user must pass both types of authentication before logging in. In this mode, you do not need to
create a key pair on each client. You can configure the clients to use the same key pair that is created
on one client for publickey authentication. With the AAA function in password authentication, the level of
commands available to a logged-in SSH user is determined by the AAA scheme..
Follow these steps to configure an SSH user and specify an authentication type for the user:
An SSH user is represented as a set of use
with the SSH username. When a user logs in to the SSH server from the SSH client, a username is
required so that the server can looks up the database for matching the username. If a match is found, it
authenticates the user using the authentication mode specified in the attribute set. If not, it tears down
the connection.
To prevent illegal users from logging in to the device, SSH supports the authentication m
blickey, a
ickey.
Password authe
AAA to authenticate the pa
cheme, password authentication
r saves the user inform
rmation is
rd of the user that is lo
d on the AAA authentication s
ocal authentication, the SSH serve
emote
e done locally or remotely
plements the authentication. F
ation server (such
lemented through th
on of the SSH server and
n password authentication
er configuration, authentication
Publickey authentication
more secure SSH connections t
im
To do...
Use the command...
Remarks
Enter system view
system-view
—
ssh authentication-type default
{
all
|
password
|
password-publickey
|
publickey
}
Specify the default
authentication type for all SSH
users
ssh user username
Use either command.
By default, no SSH user is
created and no authentication
type is specified.
Note that: If both commands
