390 CHAPTER 36: SSH CONFIGURATIONand goes on to the interactive session stage with the client. Otherwise, the serversends back to the client an SSH_SMSG_FAILURE packet, indicating that theprocessing fails or it cannot resolve the request. The client sends a session requestto the server, which processes the request and establishes a session.Data exchangeIn this stage, the server and the client exchanges data in this way:■ The client encrypts and sends the command to be executed to the server.■ The server decrypts and executes the command, and then encrypts and sendsthe result to the client.■ The client decrypts and displays the result on the terminal.Configuring the SSHServerYou must perform necessary configurations on the SSH server for SSH clients toaccess.SSH ServerConfiguration TasksConfiguring the ProtocolSupport for the UserInterfaceYou must configure the supported protocol(s) for SSH remote login. Note that theconfiguration does not take effect immediately, but will be effective forsubsequent login requests.Table 299 SSH server configuration tasksTasks DescriptionConfiguringthe SSH serverConfiguring the ProtocolSupport for the User InterfaceRequiredGenerating/Destroying a RSAor DSA Key PairRequiredExporting the RSA or DSAPublic KeyOptionalCreating an SSH User andSpecify an Authentication TypeRequiredSpecifying a Service Type foran SSH UserOptionalConfiguring SSH Management OptionalConfiguring the Client PublicKey on the ServerRequired for pubilckey authentication;unnecessary for password authenticationAssigning a Public Key to anSSH UserRequired for pubilckey authentication;unnecessary for password authenticationTable 300 Configure the protocol(s) that a user interface supportsOperation Command DescriptionEnter system view system-view -Enter the view of one ormultiple user interfacesuser-interface [ type ]first-number [ last-number ]-Configure the authenticationmode as schemeauthentication-modescheme [command-authorization ]RequiredBy default, the user interfaceauthentication mode ispassword
