H3C Technologies H3C SecBlade LB Cards - Manual (Page 192)

181
Enter password:
After you enter the correct username and password, you can log in to the router successfully.
Publickey authentication enabled Stelnet client configuration
example
Network requirements
As shown in Figure 83 , you can log in to the router through the Stelnet client that runs on LB. The router
acts as the Stelnet server, adopting publickey authentication and the RSA public key algorithm.
Figure 83 Network diagram
Configuration considerations
In the server configuration, the client public key is required. Use the client software to generate RSA key
pairs on the client before configuring the Stelnet server.
Configuration procedure
1. Configure the Stelnet client:
# Configure an IP address for interface GigabitEthernet 0/1.
system-view
[LB] interface gigabitethernet 0/1
[LB-GigabitEthernet0/1] ip address 192.168.1.56 255.255.255.0
[LB-GigabitEthernet0/1] quit
# Generate RSA key pairs.
[LB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
+++++++++++++++
+++++++++++++++
+++
++++
# Export the RSA public key to file key.pub.
[LB] public-key local export rsa ssh2 key.pub
[LB] quit
# Transmit the public key file to the server through FTP or TFTP. (Details not shown.)
2. Configure the Stelnet server:
# Generate the RSA key pairs.