1-4To configure the public key of the peer, you can:z Configure it manually: You can input on or copy the public key of the peer to the local host. Thecopied public key must have not been converted and be in the distinguished encoding rules (DER)encoding format.z Import it from the public key file: The system automatically converts the public key to a string codedusing the PKCS (Public Key Cryptography Standards). Before importing the public key, you mustupload the peer's public key file (in binary) to the local host through FTP or TFTP.z You are recommended to configure the public key of the peer by importing it from a public key file.z The device supports up to 20 host pubic keys of peers.Follow these steps to configure the public key of a peer manually:To do… Use the command… RemarksEnter system view system-view —Enter public key view public-key peer keyname —Enter public key code view public-key-code begin —Configure a public key of thepeer Enter the keyRequiredSpaces and carriage returnsare allowed betweencharacters.Return to public key view public-key-code end—When you exit public key codeview, the system automaticallysaves the public key.Return to system view peer-public-key end —Follow these steps to import the host public key of a peer from the public key file:To do… Use the command… RemarksEnter system view system-view —Import the host public key of apeer from the public key filepublic-key peer keynameimport sshkey filename RequiredDisplaying and Maintaining Public KeysTo do… Use the command… RemarksDisplay the public keys of thelocal key pairsdisplay public-key local { dsa| rsa } publicDisplay the public keys of thepeersdisplay public-key peer [ brief| name publickey-name ]Available in any view
