1-22Operation Original commands Current commandsCreate an SSH user andspecify pubblickeyauthentication as itsauthentication typessh user usernameauthentication-type rsassh user usernameauthentication-type publickeyz After the RSA key pair is generated, the display rsa local-key-pair public command displays twopublic keys (the host public key and server public key) when the switch is working inSSH1-compatible mode, but only one public key (the host public key) when the switch is working inSSH2 mode.z The result of the display rsa local-key-pair public command or the public key converted with theSSHKEY tool contains no information such as the authentication type, so they cannot be directlyused as parameters in the public-key peer command. For the same reason, neither can the resultof the display public-key local rsa public command be used in the rsa peer-public-keycommand directly.SSH Configuration ExamplesWhen Switch Acts as Server for Local Password AuthenticationNetwork requirementsAs shown in Figure 1-10, establish an SSH connection between the host (SSH Client) and the switch(SSH Server) for secure data exchange. The host runs SSH2.0 client software. Passwordauthentication is required.Network diagramFigure 1-10 Switch acts as server for local password authenticationConfiguration procedurez Configure the SSH server# Create a VLAN interface on the switch and assign an IP address, which the SSH client will use as thedestination for SSH connection. system-view[Switch] interface vlan-interface 1[Switch-Vlan-interface1] ip address 192.168.0.1 255.255.255.0[Switch-Vlan-interface1] quit
