3Com Switch 7750 Configuration Guide

SSH Terminal Services 781
[SW7750-ui-vty0-4] protocol inbound ssh
# Configure the login protocol for user client002 as SSH and authentication type
as RSA public key.
[SW7750] ssh user client002 authentication-type rsa
# Generate randomly RSA key pairs on the SSH2.0 client and send the
corresponding public keys to the server.
# Configure client public keys on the server, with their name as 3Com002.
[SW7750] rsa peer-public-key 3Com002
[SW7750-rsa-public-key] public-key-code begin
[SW7750-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463
[SW7750-rsa-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913
[SW7750-rsa-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4
[SW7750-rsa-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC
[SW7750-rsa-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16
[SW7750-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125
[SW7750-rsa-key-code] public-key-code end
[SW7750-rsa-public-key] peer-public-key end
[SW7750] ssh user client002 assign rsa-key 3Com002
# Start the SSH client software on the host which stores the RSA private keys and
make corresponding configuration to establish an SSH connection.
SSH Client Configuration
Example
Network requirements
As shown in Figure 203,
■ Switch A serves as an SSH client and uses the username of client001 and IP
address of 10.1.1.2/24.
■ Switch B serves as an SSH server, with its IP address 10.1.1.3/24.
■ RSA authentication method is adopted to enhance the security.
■ The SSH client authenticates the SSH server to ensure the validity of the SSH
server.
Network diagram
Figure 203 Network diagram for SSH client configuration
Configuration procedure
1 Configure Switch B (SSH server)
# Create a VLAN interface on the switch and assign it an IP address, which the SSH
client will use as the destination for SSH connection.
<SW7750> system-view
[SW7750] interface vlan-interface 1
SSH server SSH client
Switch B Switch A
Vlan-int1
10 .1 .1.3/ 24
Vlan-int1
10. 1.1 .2/ 24