1-3z Configuration of the public-key local create command can survive a reboot.z The public-key local create rsa command generates two key pairs: one server key pair and onehost key pair. Each key pair consists of a public key and a private key.z The length of an RSA key modulus is in the range 512 to 2048 bits. After entering the public-keylocal create rsa command, you will be required to specify the modulus length. For security, amodulus of at least 768 bits is recommended.z The public-key local create dsa command generates only one key pair, that is, the host key pair.z The length of a DSA key modulus is in the range 512 to 2048 bits. After entering the public-keylocal create dsa command, you will be required to specify the modulus length. For security, amodulus of at least 768 bits is recommended.Displaying or Exporting the Local RSA or DSA Host Public KeyYou can display the local RSA or DSA host public key on the screen or export it to a specified file, so asto configure the local RSA or DSA host public key on the remote end.Follow these steps to display or export the local RSA or DSA host public key:To do… Use the command… RemarksEnter system view system-view —Display the local RSA hostpublic key on the screen in aspecified format, or export it toa specified filepublic-key local export rsa{ openssh | ssh1 | ssh2 }[ filename ]Display the local DSA hostpublic key on the screen in aspecified format, or export it toa specified filepublic-key local export dsa{ openssh | ssh2 } [ filename ]Select a command according tothe type of the key to beexported.Destroying an Asymmetric Key PairAn asymmetric key pair may expire or leak. In this case, you need to destroy it and generate a new pair.Follow these steps to destroy an asymmetric key pair:To do… Use the command… RemarksEnter system view system-view —Destroy an asymmetric key pair public-key local destroy { dsa| rsa } RequiredConfiguring the Public Key of a PeerTo authenticate the remote host, you need to configure the RSA or DSA public key of that peer on thelocal host.
