Nortel Networks 4050 Managing known hosts SSH keys using the CLI, Cfg/sys/adm/sshkeys/knownhosts

Chapter 10 Configuring system settings 487

Managing known hosts SSH keys using the CLI

You can paste or import public SSH keys from remote hosts as a convenience, so that you do not get prompted to accept a new key during later use of SCP or SFTP for file or data transfer.

To achieve strict “man in the middle” protection, verify the fingerprint before applying the changes.

To manage the public SSH keys of known remote hosts, use the following command:

/cfg/sys/adm/sshkeys/knownhosts

The SSH Known Host Keys menu displays.

The SSH Known Host Keys menu includes the following options:

/cfg/sys/adm/sshkeys/knownhosts

followed by:

list	Lists the type and fingerprint of the known SSH keys for
	remote hosts, by index number.
del <index number>	Removes the specified known host SSH key.
	To view the index numbers of all known host SSH keys,
	use the list command.
add	Allows you to paste in the contents of a key file you
	have downloaded from the remote host.
	When prompted, paste in the key, then press Enter.
	Enter an elllipsis (...) to signal the end of the key.
	Valid formats are as described for the
	/cfg/sys/adm/sshkeys/show command or the
	native format used by the OpenSSH implementation.
	If the key has a valid format, you will be prompted for
	the corresponding host name or IP address. You can
	provide a comma-separated list of names and
	IP addresses for the host.
	The system automatically assigns the next available
	index number to the known host SSH key.
import <IPaddr>	Allows you to import an SSH key from a remote host.
	• IPaddr — the IP address of the remote host
	The system automatically assigns the next available
	index number to the known host SSH key.

Nortel Secure Network Access Switch 4050 User Guide