1-10Configuring Whether First-time Authentication is SupportedWhen the device connects to the SSH server as an SSH client, you can configure whether the devicesupports first-time authentication.z With first-time authentication, when an SSH client not configured with the server host public keyaccesses the server for the first time, the user can continue accessing the server, and save thehost public key on the client. When accessing the server again, the client will use the saved serverhost public key to authenticate the server.z Without first-time authentication, a client not configured with the server host public key will deny toaccess the server. To access the server, a user must configure in advance the server host publickey locally and specify the public key name for authentication.Enable the device to support first-time authenticationFollow these steps to enable the device to support first-time authentication:To do... Use the command… RemarksEnter system view system-view —Enable the device to supportfirst-time authentication ssh client first-time enableOptionalBy default, first-time authentication issupported on a client.Disable first-time authenticationFor successful authentication of an SSH client not supporting first-time authentication, the server hostpublic key must be configured on the client and the public key name must be specified.Follow these steps to disable first-time authentication:To do... Use the command… RemarksEnter system view system-view —Disable first-time authenticationsupport undo ssh client first-timeOptionalBy default, first-time authenticationis supported on a client.Configure the server public key Refer to Configuring a Client PublicKeyRequiredThe method of configuring serverpublic key on the client is similar tothat of configuring client public keyon the server.Specify the host public key name ofthe serverssh client authentication serverserver assign publickey keyname RequiredEstablishing a Connection Between the SSH Client and the ServerFollow these steps to establish the connection between the SSH client and the server:To do... Use the command… RemarksEstablish aconnection betweenthe SSH client andserver, and specifythe public keyalgorithm, preferredencryption algorithms,For an IPv4serverssh2 server [ port-number ] [ identity-key { dsa |rsa } | prefer-ctos-cipher { aes128 | des } |prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 }| prefer-kex { dh-group-exchange | dh-group1 |dh-group14 } | prefer-stoc-cipher { aes128 | des } |prefer-stoc-hmac { md5 | md5-96 | sha1 |sha1-96 } ] *RequiredUse eithercommand inuser view.
