F3215-HP Load Balancing Module Security Configuration Guide-6PW101

140
Enter password:
After you enter the correct username and password, you can log in to the router successfully.
When the LB module acts as an Stelnet client for publickey
authentication
Network requirements
As shown in Figure 52, you can log in to the router through the Stelnet client that runs on LB module. The
router acts as the Stelnet server, adopting publickey authentication and the RSA public key algorithm.
Figure 52 Network diagram
Configuration considerations
In the server configuration, the client public key is required. Use the client software to generate RSA key
pairs on the client before configuring the Stelnet server.
Configuration procedure
1. Configure the Stelnet client:
# Configure an IP address for interface GigabitEthernet 0/1.
<LB> system-view
[LB] interface gigabitethernet 0/1
[LB-GigabitEthernet0/1] ip address 192.168.1.56 255.255.255.0
[LB-GigabitEthernet0/1] quit
# Generate RSA key pairs.
[LB] public-key local create rsa
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is greater than 512,
It will take a few minutes.
Press CTRL+C to abort.
Input the bits of the modulus[default = 1024]:
Generating Keys...
+++++++++++++++
+++++++++++++++
+++
++++
# Export the RSA public key to file key.pub.
[LB] public-key local export rsa ssh2 key.pub
[LB] quit
Then, you transmit the public key file to the server through FTP or TFTP. (Details not shown.)
2. Configure the Stelnet server:
# Generate the RSA key pairs.