Configuring the Switch to Act as the SSH Client and Use RSA Authentication 293
[3Com] rsa local-key-pair create
# Set the authentication mode for the user interfaces to AAA.
[3Com] user-interface vty 0 4
[3Com-ui-vty0-4] authentication-mode scheme
# Enable the user interfaces to support SSH.
[3Com-ui-vty0-4] protocol inbound ssh
# Set the client’s command privilege level to 3.
[3Com-ui-vty0-4] user privilege level 3
[3Com-ui-vty0-4] quit
# Configure the authentication method of the SSH client named client001 as
RSA.
[3Com] ssh user client001 authentication-type rsa
nAfter generating an RSA key pair on the SSH client, manually configure the RSA
public key on the SSH server. For details, refer to “Configure Switch A” on page
293.
# Configure the client public key Switch001.
[3Com] rsa peer-public-key Switch001
RSA public key view: return to System View with "peer-public-key end".
[3Com-rsa-public-key] public-key-code begin
RSA key code view: return to last view with "public-key-code end".
[3Com-rsa-key-code] 3047
[3Com-rsa-key-code] 0240
[3Com-rsa-key-code] C8969B5A 132440F4 0BDB4E5E 40308747 804F608B
[3Com-rsa-key-code] 349EBD6A B0C75CDF 8B84DBE7 D5E2C4F8 AED72834
[3Com-rsa-key-code] 74D3404A 0B14363D D709CC63 68C8CE00 57C0EE6B
[3Com-rsa-key-code] 074C0CA9
[3Com-rsa-key-code] 0203
[3Com-rsa-key-code] 010001
[3Com-rsa-key-code] public-key-code end
[3Com-rsa-public-key] peer-public-key end
[3Com]
# Assign the public key Switch001 to client client001.
[3Com] ssh user client001 assign rsa-key Switch001
■Configure Switch A
# Create a VLAN interface on the switch and assign an IP address for it. This
address will serve as the SSH client’s address for SSH connection.
<3Com> system-view
[3Com] interface vlan-interface 1
[3Com-Vlan-interface1] ip address 10.165.87.137 255.255.255.0
[3Com-Vlan-interface1] quit
# Generate an RSA key pair.
[3Com] rsa local-key-pair create