H3C S7500 Series Ethernet Switches Release 3135 DHCP Configuration Examples

SSH Configuration Examples
H3C S7500 Series Ethernet Switches Release 3135 Chapter 1 SSH Overview
1-1
Chapter 1 SSH Overview
1.1 Introduction to SSH
Secure Shell (SSH) is designed to provide secure remote login and other security
services in insecure network environments. When users remotely access the switch
across an insecure network, SSH will automatically encrypt data before transmission
and decrypt data after they reach the destination to guarantee information security and
protect switches from such attacks as plain-text password interception. In addition,
SSH provides powerful authentication to defend against the man-in-the-middle attacks.
SSH uses the client/server mode, by which the SSH server accepts the connection
requests from SSH clients and provides authentication. SSH clients can establish SSH
connections and log into the SSH server through the SSH connections.
SSH also provides other functions, such as compressing the data to be transmitted to
speed up the transmission speed, functioning as Telnet, and providing secure channels
for FTP, PoP and even PPP.
 Note:
For details about SSH functions supported on Ethernet switches, refer to related user
manuals.
1.2 Support for SSH Functions
Currently, an S7500 switch can function as an SSH client or an SSH server.
1.3 SSH Configuration
1.3.1 Configuring an SSH Server
I. For a H3C switch to be the SSH server
z Configure the protocols supported on user interfaces
z Create or destroy an RSA key pair
z Create an SSH user and specify an authentication type
z Specify a service type for the SSH user
z Configure the SSH management function on the SSH server
z Configure a client public key on the SSH server
z Specify a public key for the SSH user