1-23The results of the display rsa local-key-pair public command or the public key converted with theSSHKEY tool contains no information such as the authentication type, so they cannot be directly usedas parameters in the public-key peer command. For the same reason, neither can the results of thedisplay public-key local rsa public command be used in the rsa peer-public-key command directly.SSH Configuration ExamplesWhen Switch Acts as Server for Local Password AuthenticationNetwork requirementsAs shown in Figure 1-11, establish an SSH connection between the host (SSH Client) and the switch(SSH Server) for secure data exchange. The host runs SSH2.0 client software. Passwordauthentication is required.Network diagramFigure 1-11 Switch acts as server for local password authenticationConfiguration procedurez Configure the SSH server# Create a VLAN interface on the switch and assign an IP address, which the SSH client will use as thedestination for SSH connection. system-view[Switch] interface vlan-interface 1[Switch-Vlan-interface1] ip address 192.168.0.1 255.255.255.0[Switch-Vlan-interface1] quitGenerating the RSA key pair on the server is prerequisite to SSH login.# Generate RSA key pair.[Switch] public-key local create rsa# Set the authentication mode for the user interfaces to AAA.[Switch] user-interface vty 0 4
