123• If the command text exceeds 2000 bytes, you can execute the commands by saving the text as aconfiguration file, uploading the configuration file to the server through SFTP, and then using theconfiguration file to restart the server.Configuring the device as an SSH serverTo ensure that all SSH clients can log into the SSH server successfully, you are recommended to generateboth DSA and RSA key pairs on the SSH server. This is because different SSH clients may use differentpublickey algorithms, though a single client usually uses only one type of publickey algorithm.Enabling SSH serverFollow these steps to enable SSH server:To do… Use the command… Remarks1. Enter system view system-view —2. Enable the SSH server function ssh server enable RequiredDisabled by defaultConfiguring the user interfaces for SSH clientsAn SSH client accesses the switch through a VTY user interface. Therefore, you need to configurethe user interfaces for SSH clients to allow SSH login. Note that the configuration takes effect onlyfor clients logging in after the configuration.Follow these steps to configure the protocols for the current user interface to support:To do… Use the command… Remarks1. Enter system view system-view —2. Enter user interface view of oneor more user interfacesuser-interface vty number [ending-number ] —3. Set the login authenticationmode to schemeauthentication-mode scheme[ command-authorization ]RequiredBy default, the authentication modeis password.4. Configure the user interface(s)to support SSH login protocol inbound { all | ssh }OptionalBy default, the system supportsboth protocols, that is, Telnet andSSH.• For more information about the authentication-mode and protocol inbound commands, seeLogging In to the Switch in the Fundamentals Configuration Guide.
