H3C S9500E Series Security Configuration Manual

Also see for S9500E Series: Card Manual Command reference Configuration guide Quick start guide Configuration guide

Contents

H3C S9500E Series Security Configuration Manual Manual pdf 114 page image

114To do… Use the command… Remarks2. Display the public keys of thepeersdisplay public-key peer [brief | name publickey-name ]Public key configuration examplesBy default, Ethernet, VLAN, and aggregate interfaces are in the state of DOWN. To configure such aninterface, use the undo shutdown command to bring it up first.Configuring the public key of a peer manuallyNetwork requirementsDevice A is authenticated by Device B when accessing Device B, so the public key of Device Ashould be configured on Device B in advance.In this example:• RSA is used.• The host public key of Device A is configured manually on Device B.Figure 34 Network diagram for manually configuring the public key of a peerConfiguration procedure1. Configure Device ACreate RSA key pairs on Device A. system-view[DeviceA] public-key local create rsaWarning: The local key pair already exist.Confirm to replace them? [Y/N]:yThe range of public key size is (512 ~ 2048).NOTES: If the key modulus is greater than 512,It will take a few minutes.Press CTRL+C to abort.Input the bits of the modulus[default = 1024]:Generating Keys...++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++