124• If you configure a user interface to support SSH, be sure to configure the authentication method as AAAby using the authentication-mode scheme command.• For a user interface configured to support SSH, you cannot change the authentication mode. To changethe authentication mode, undo the SSH support configuration first.Configuring a client public keyThis configuration task is only necessary for SSH users using publickey authentication.For each SSH user that uses publickey authentication to login, you must configure the client’s DSAor RSA host public key on the server, and configure the client to use the corresponding private key.To configure the public key of an SSH client, you can:• Configure it manually: You can input or copy the public key to the local host. The copiedpublic key must have not been converted and be in the distinguished encoding rules (DER)encoding format.• Import it from the public key file: During the import process, the system will automaticallyconvert the public key to a string coded using the Public Key Cryptography Standards(PKCS). Before importing the public key, you must upload the public key file (in binary) to theserver through FTP or TFTP.• You are recommended to configure a client public key by importing it from a public key file.• You can configure at most 20 client pubic keys on an SSH server.Configuring a client public key manuallyFollow these steps to configure the client public key manually:To do… Use the command… Remarks1. Enter system view system-view —2. Enter public key view public-key peer keyname —3. Enter public key code view public-key-code begin —4. Configure a client public key Enter the content of the public keyRequiredSpaces and carriage returns areallowed between characters.5. Return from public key codeview to public key view public-key-code end—When you exit public key codeview, the system automaticallysaves the public key.6. Return from public key view tosystem view peer-public-key end —
