R211x-HP Flexfabric 11900 Security Command Reference

174
2. Type the public key.
3. Execute the peer-public-key end command to save the public key and return to system view.
The public key you type in the public key view must be in a correct format. If your device is an HP device,
use the display public-key local public command to display and record its public key.
Examples
# Specify the name key1 for a peer public key and enter public key view.
<Sysname> system-view
[Sysname] public-key peer key1
[Sysname-pkey-public-key-key1]
Related commands
• display public-key local public
• display public-key peer
• peer-public-key end
public-key peer import sshkey
Use public-key peer import sshkey to import a peer host public key from the public key file.
Use undo public-key peer to remove the specified peer host public key.
Syntax
public-key peer keyname import sshkey filename
undo public-key peer keyname
Default
The device has no peer public key.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
keyname: Specifies a name for a peer public key, a case-sensitive string of 1 to 64 characters.
filename: Specifies the name of the file for saving the local host public key. The file name is a string of
case-insensitive characters excluding ./ and ../. The name cannot be dots (.), hostkey, serverkey, dsakey,
or ecdsakey, and cannot start with a slash (/).For more information about file name, see Fundamentals
Configuration Guide.
Usage guidelines
After you configure this command, the system automatically transforms the host public key to the PKCS
format, and saves the key. This operation requires that you get a copy of the public key file from the peer
device through FTP or TFTP in binary mode in advance.
In non-FIPS mode, the device supports importing public keys in the format of SSH1.5, SSH2.0, and
OpenSSH.