Operation Manual – SSHH3C S7500E Series Ethernet Switches Chapter 1 SSH Configuration1-71.2.4 Configuring RSA KeysI. Creating the RSA key pairFor successful SSH login, you must create the RSA key pair first.Follow these steps to create an RSA key pair:To do… Use the command… RemarksEnter system view system-view —Create the localRSA key pairpublic-key localcreate rsaRequiredBy default, there is no RSA key pair.Caution:z Configuration of the rsa local-key-pair create command can survive a reboot. Youonly need to configure it once.z The length of an RSA server/host key is in the range 512 to 2048 bits. With SSH2,however, some clients require that the keys generated by the server must not beless than 768 bits.II. Exporting the RSA key pairYou can display or export the local RSA host key for setting the host key on the remoteend.Follow these steps to display or export an RSA host key:To do… Use the command… RemarksEnter system view system-view —Display the local RSA host key onthe screen in a specified format, orexport it to a specified filepublic-key local export rsa{ openssh | ssh1 | ssh2 }[ filename ]RequiredIII. Destroying the RSA key pairFollow these steps to destroy an RSA key pair:To do… Use the command… RemarksEnter system view system-view —Destroy the local RSA key pair public-key local destroy rsa Required
