2-6Follow these steps to configure the protocols for the current user interface to support:To do… Use the command… RemarksEnter system view system-view —Enter user interface view of oneor more user interfacesuser-interface vty number[ ending-number ] —Set the login authenticationmode to schemeauthentication-mode scheme[ command-authorization ]RequiredBy default, the authenticationmode is password.Configure the user interface(s)to support SSH login protocol inbound { all | ssh }OptionalAll protocols are supported bydefault.z For detailed information about the authentication-mode and protocol inbound commands, referto Login Commands of the System Volume.z If you configure a user interface to support SSH, be sure to configure the correspondingauthentication method with the authentication-mode scheme command.z For a user interface configured to support SSH, you cannot change the authentication mode. Tochange the authentication mode, undo the SSH support configuration first.Configuring a Client Public KeyThis configuration task is only necessary for SSH users using publickey authentication.For each SSH user that uses publickey authentication to login, you must configure the client’s DSA orRSA host public key on the server, and configure the client to use the corresponding private key.To configure the public key of an SSH client, you can:z Configure it manually: You can input or copy the public key to the local host. The copied public keymust have not been converted and be in the distinguished encoding rules (DER) encoding format.z Import it from the public key file: During the import process, the system will automatically convertthe public key to a string coded using the Public Key Cryptography Standards (PKCS). Beforeimporting the public key, you must upload the public key file (in binary) to the local host throughFTP or TFTP.
