1-21Use the undo ssh authentication-type default command to remove the specified defaultauthentication mode. That is, no default authentication mode is specified for SSH users. In this case,when an SSH user is added, you must specify an authentication mode for the user at the same time.By default, no default authentication mode is specified.The differences between password authentication, publickey authentication, and password-publickeyauthentication are:z Password authentication is vulnerable to attacks.z Publickey authentication provides more secure SSH connections than password authenticationdoes. The mode is easy to use and prevents illegal operations such as malicious password guess.After the configuration, the subsequent authentications are implemented automatically withoutasking you to enter the password.z Password-publickey authentication takes the advantages of both password authentication andpublickey authentication. An SSH user must pass both types of authentication before logging in.The combination of password and publickey authentications eliminates the vulnerability of the SSHserver caused by the clients. You can use password-publickey authentication together with AAA forauthentication and authorization of users.Related commands: display ssh user-information.Examples# Specify the publickey authentication as the default authentication mode.system-viewSystem View: return to User View with Ctrl+Z.[Sysname]ssh authentication-type default publickey# Create an SSH user[Sysname] ssh user user1# Display information about configured SSH users.[Sysname] display ssh user-informationUsername Authentication-type User-public-key-name Service-typeuser1 publickey null stelnetssh client assignSyntaxssh client { server-ip | server-name } assign { publickey | rsa-key } keynameundo ssh client { server-ip | server-name } assign { publickey | rsa-key }ViewSystem viewParametersserver-ip: IP address of the server.server-name: Name of the server, a string of 1 to 184 characters.keyname: Name of the public key of the server, a string of 1 to 64 characters.
