R3166-R3206-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

152

2. Configure the SSH client

# Configure an IP address for interface GigabitEthernet0/0.

<FirewallA> system-view

[FirewallA] interface gigabitethernet 0/0

[FirewallA-GigabitEthernet0/0] ip address 10.165.87.137 255.255.255.0

[FirewallA-GigabitEthernet0/0] quit

# Generate a DSA key pair.

[FirewallA] public-key local create dsa

# Export the DSA public key to the file key.pub.

[FirewallA] public-key local export dsa ssh2 key.pub

[FirewallA] quit

NOTE:

fter

enera

ing a key pair on a client, you must transmit the saved public key file to the server throu

h FTP

or TFTP and have the configuration on the server done before continuing configuration of the client.

# Establish an SSH connection to the server (10.165.87.136).

<FirewallA> ssh2 10.165.87.136

Username: client002

Trying 10.165.87.136 ...

Press CTRL+K to abort

Connected to 10.165.87.136 ...

The Server is not authenticated. Continue? [Y/N]:y

Do you want to save the server public key? [Y/N]:n

After you enter the correct password, you can log into Firewall B successfully.