Users Guide

300 Authentication, Authorization, and Accounting

Also, ensure that the private key ~/.ssh/id_rsa is not readable by others by

executing the chmod 0600 ~/.ssh/id_rsa command in Linux.

Authentication will fail if the file is readable by others.

The command string to log into the switch (substituting the correct IP

address) from a Linux account is:

ssh -2 -i ~/.ssh/id_rsa -F ~/.ssh/ssh_config 10.27.21.70

Authenticating Without a Public Key

When authenticating without the public key, the switch prompts for the user

name and password. This is an SSH function, not a switch function. If the

user knows the administrator login and password, then they are able to

authenticate in this manner.

Associating a User With an SSH Key

The following example shows how to associate a user with an externally

generated SSH key. SSH, RSA, or DSA keys can be generated by using the ssh-

keygen command on a Unix system or with other publicly available utilities.

Create the local user: