HP VPN Firewall Appliances VPN Configuration Guide

312
Method Prere
q
uisites Remarks
Manually configure
the public key
—
input
or copy the key data
• Display and record the public key of the
intended asymmetric key pair.
• If the peer device is an HP device, use the
display public-key local public
command to view and record its public
key. A public key displayed by other
methods for the HP device may not be in
a correct format.
• The recorded public key must be in
the correct format, or the manual
configuration of a
format-incompliant public key will
fail.
• Always use the first method if you
are not sure about the format of the
recorded public key.
To import the host public key from a public key file to the local device:
Ste
p
Command
1. Enter system view.
system-view
2. Import the host public key from the public key file.
public-key peer keyname import sshkey filename
To manually configure the peer public key on the local device:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Specify a name for the public
key and enter public key view.
public-key peer keyname
N/A
3. Enter public key code view.
public-key-code begin N/A
4. Configure the peer public key.
Type or copy the key
Spaces and carriage returns are allowed
between characters.
5. Return to public key view.
public-key-code end
When you exit public key code view, the
system automatically saves the public key.
6. Return to system view.
peer-public-key end N/A
Displaying public keys
Task Command Remarks
Display the local public keys
display public-key local { dsa | rsa } public
[ | { begin | exclude | include }
regular-expression ]
Available in any view.
Display the specified or all peer
public keys on the local device.
display public-key peer [ brief | name
publickey-name ] [ | { begin | exclude |
include } regular-expression ]
Available in any view.