125When inputting or copying the content of the public key, be sure that the content is in H3C public keyformat, that is, you need to input or copy it exactly as it is displayed by the display public-key localcommand. When interacting with non-H3C software, you can only configure a client public key byimporting it from a public key file.Importing a client public key from a public key fileFollow these steps to import a public key from a public key file:To do… Use the command… Remarks1. Enter system view system-view —2. Import the public key from apublic key filepublic-key peer keynameimport sshkey filename RequiredFor more information about client side public key configuration and the relevant commands, see Public Keyin the Security Configuration Guide and Security Command Reference.Configuring an SSH userThis configuration allows you to create an SSH user and specify the service type andauthentication mode.Follow these steps to configure an SSH user and specify the service type and authentication mode:To do… Use the command… Remarks1. Enter system view system-view —2. Create an SSH user, andspecify the service type andauthentication modeFor Stelnet usersssh user username service-type stelnet authentication-type { password | { any |password-publickey |publickey } assign publickeykeyname } RequiredUse eithercommand.For all users or SFTPusersssh user username service-type { all | sftp }authentication-type {password | { any |password-publickey |publickey } assign publickeykeyname work-directorydirectory-name }• A user without an SSH account can still pass password authentication and log into the server throughStelnet or SFTP, as long as the user can pass AAA authentication and the service type is SSH.• An SSH server supports up to 1024 SSH users.• The service type of an SSH user can be Stelnet (Secure Telnet) or SFTP (Secure FTP). For information aboutStelnet, see SSH2.0 overview. For information about SFTP, see SFTP overview.
