1-12For information about the display public-key local and display public-key peer commands, refer toPublic Key Commands.SSH Server Configuration ExamplesWhen Switch Acts as Server for Password AuthenticationNetwork requirementsz As shown in Figure 1-1, a local SSH connection is established between the host (the SSH client)and the switch (the SSH server) for secure data exchange.z Password authentication is required. The username and password are saved on the switch.Figure 1-1 Switch acts as server for password authenticationSSH client SSH serverHost Switch192.168.0.2/24 Vlan-int1192.168.0.1/24Configuration procedure1) Configure the SSH server# Generate RSA and DSA key pairs and enable the SSH server. system-view[Switch] public-key local create rsa[Switch] public-key local create dsa[Switch] ssh server enable# Configure an IP address for VLAN interface 1. This address will serve as the destination of the SSHconnection.[Switch] interface vlan-interface 1[Switch-Vlan-interface1] ip address 192.168.1.40 255.255.255.0[Switch-Vlan-interface1] quit# Set the authentication mode for the user interfaces to AAA.[Switch] user-interface vty 0 4[Switch-ui-vty0-4] authentication-mode scheme# Enable the user interfaces to support SSH.[Switch-ui-vty0-4] protocol inbound ssh[Switch-ui-vty0-4] quit# Create local user client001, and set the user command privilege level to 3[Switch] local-user client001
