The configuration of SSH Client on H3C 5600 switch

The configuration of SSH Client on H3C 5600 switch

I            Requirement for the diagram

1.      SwitchA act as SSH client, it’s name is client003.

2.      SwitchB act as SSH Server and it’s ip address is 10.165.87.136.

II          Network topology.

III        Steps of configuration

1.      Configure the client authenticate the server the first time.

[H3C] ssh client first-time enable

2.      configure the public-key on the client

[SwitchA] rsa peer-public-key public

[SwitchA-rsa-public-key] public-key-code begin

[SwitchA-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463

[SwitchA-rsa-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913

[SwitchA-rsa-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4

[SwitchAy-rsa-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC

[SwitchA-rsa-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16

[SwitchA-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125

[SwitchA-rsa-key-code] public-key-code end

[SwitchA-rsa-public-key] peer-public-key end

[SwitchA] ssh client 10.165.87.136 assign rsa-key public

3.      start SSH client

The first mode : adopt password authentication and start the default Encryption Algorithm

[SwitchA] ssh2 10.165.87.136

username: client003

Trying 10.165.87.136

Press CTRL+K to abort

Connected to 10.165.87.136...

The Server is not autherncated.Do you continue access it?(Y/N):y

Do you want to save the server's public key?(Y/N):y

Enter password:     

*********************************************************

*          All rights reserved (1997-2005)              *

*      Without the owner's prior written consent,       *

*no decompiling or reverse-engineering shall be allowed.*

*********************************************************

<SwitchA>

The second mode: adopt RSA public-key authentication，start the corresponding Encryption Algorithm

[SwitchA] ssh2 10.165.87.136 22 perfer_kex dh_group1 perfer_ctos_cipher des perfer_ctos_hmac md5 perfer_stoc_hmac md5

username: client003

Trying 10.165.87.136...

Press CTRL+K to abort

Connected to 10.165.87.136...

The Server is not autherncated.Do you continue access it?(Y/N):y

Do you want to save the server's public key?(Y/N):y

*********************************************************

*          All rights reserved (1997-2005)              *

*      Without the owner's prior written consent,       *

*no decompiling or reverse-engineering shall be allowed.*

*********************************************************

<SwitchA>

IV       Key notes in the configuration

None.