H3C Technologies H3C S12500-X Series Switches - Manual (Page 207)

195
[SwitchA-pkey-public-key-key1]D716D7DB9FCABB4ADBF6FB4FDB0CA25C761B308EF53009F7
1
01F7C62621216D5A572C379A32AC290
[SwitchA-pkey-public-key-key1]E55B394A217DA38B65B77F0185C8DB8095522D1EF044B465
E
8716261214A5A3B493E866991113B2D
[SwitchA-pkey-public-key-key1]485348
[SwitchA-pkey-public-key-key1] peer-public-key end
[SwitchA] quit
# Establish an SSH connection to the server 192.168.1.40 and specify the host public key of
the server.
ssh2 192.168.1.40 publickey key1
Username: client001
[email protected]'s password:
After you enter the correct password, you successfully log in to Switch B.
284B
Publickey authentication enabled Stelnet client configuration
example
502B
Network requirements
As shown in
901H
Figure 58 , you can log in to Switch B through the Stelnet client that runs on Switch A and are
assigned the user role network-admin for configuration management. Switch B acts as the Stelnet server
and uses publickey authentication and the DSA public key algorithm.
Figure 58 Network diagram
503B
Configuration procedure
In the server configuration, the client public key is required. Use the client software to generate a DSA key
pair on the client before configuring the Stelnet server.
1. Configure the Stelnet client:
# Assign an IP address to VLAN-interface 2.
system-view
[SwitchA] interface vlan-interface 2
[SwitchA-Vlan-interface2] ip address 192.168.1.56 255.255.255.0
[SwitchA-Vlan-interface2] quit
# Generate a DSA key pair.
[SwitchA] public-key local create dsa
The range of public key size is (512 ~ 2048).
If the key modulus is greater than 512, it will take a few minutes.
Press CTRL+C to abort.
Input the modulus length [default = 1024]:
Generating Keys...