Reference Guide

Security | 807
Figure 40-12. Client-based SSH Authentication
Troubleshooting SSH
• You may not bind id_rsa.pub to RSA authentication while logged in via the console. In this case,
Message 2 appears.
• Host-based authentication must be enabled on the server (Dell Force10 system) and the client (Unix
machine). Message 3 appears if you attempt to log in via SSH and host-based is disabled on the client.
In this case, verify that host-based authentication is set to “Yes” in the file ssh_config (root permission
is required to edit this file).
• If the IP address in the RSA key does not match the IP address from which you attempt to log in,
Message 4 appears. In this case, verify that the name and IP address of the client is contained in the file
/etc/hosts.
Telnet
To use Telnet with SSH, you must first enable SSH, as described above.
By default, the Telnet daemon is enabled. If you want to disable the Telnet daemon, use the following
command, or disable Telnet in the startup config.
Use the [
no] ip telnet server enable command to enable or disable the Telnet daemon.
Message 2 RSA Authentication Error
%Error: No username set for this term.
Message 3 Host-based Authentication Error
permission denied (host based)
Message 4 RSA Authentication Error
getname info 8 failed
FTOS#ssh 10.16.127.201 ?
-l User name option
-p SSH server port option (default 22)
-v SSH protocol version
FTOS(conf)#ip telnet server enable
FTOS(conf)#no ip telnet server enable