HP 5500 Ei 5500 Si Switch Series Configuration Guide

 296 
Establishing a connection between the SSH client and server  
Task Command Remarks 
Establish a connection 
between the SSH client and 
the server, and specify the 
public key algorithm, 
preferred encryption 
algorithm, preferred HMAC 
algorithm and preferred key 
exchange algorithm. 
• For an IPv4 ser ver: 
ssh2  server  [ port-number  ] [ vpn-instance  
vpn-instance-name  ] [ identity-key { dsa | 
rsa } | prefer-ctos-cipher  { 3des | aes128  | 
des  } | prefer-ctos-hmac  { md5 | md5-96  | 
sha1...

 297 
Task Command Remarks 
Display SSH server status 
information or session information 
on an SSH server. display ssh server 
{ status  | 
session  } [ | { begin |  exclude | 
include  } regular-expression ]  Available in any view
 
Display the mappings between 
SSH servers and their host public 
keys on an SSH client.  display ssh server-info
 [ | { begin  | 
exclude  | include  } 
regular-expression  ]  Available in any view
 
Display information about SSH 
users on an SSH server.  display ssh...

 298 
++++++++ 
++++++++++++++ 
+++++ 
++++++++ 
# Generate a DSA key pair. 
[Switch] public-key local create dsa 
The range of public key size is (512 ~ 2048). 
NOTES: If the key modulus is greater than 512, 
It will take a few minutes. 
Press CTRL+C to abort. 
Input the bits of the modulus[default = 1024]: 
Generating Keys... 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\
++++++++ 
+++++++++++++++++++++++++++++++++++ 
# Enable the SSH server. 
[Switch] ssh server enable 
#...

 299 
Figure 102 Specifying the host name (or IP address) 
 
 
Click Open to connect to the server. If the connection is normal, you will be prompted to enter the 
username and password. After entering the username ( client001) and password ( aabbcc), you can 
enter the configuration interface of the server.  
When the switch acts as a server for publickey authentication 
Network requirements 
As shown in Figure 103 , a host (the SSH client) and a switch (the SSH server) are directly connected....

 300 
 IMPORTANT: 
During SSH server configuration, 
the client public key is required. Use the client software to 
generate RSA
key pairs on the client before configuring the SSH server.  
1. Configure the SSH client: 
# Generate the RSA key pairs. 
Run PuTTYGen.exe, select  SSH-2 RSA and click Generate. 
Figure 104  Generating the key pair on the client 
 
 
When the generator is generating the key pair, you must move the mouse continuously and keep 
the mouse off the green progress bar shown in...

 301 
Figure 105 Generating process 
 
 
After the key pair is generated, click Save public key and specify the file name as  key.pub to save 
the public key. 
Figure 106  Saving the key pair on the client 
 
  

 302 
Likewise, to save the private key, click Save private key. A warning window pops up to prompt 
you whether to save the private key without any protection. Click  Yes and enter the name of the file 
for saving the key ( private.ppk in this case).  
Then, transmit the public key file  to the server through FTP or TFTP. 
2. Configure the SSH server: 
# Generate the RSA key pairs. 
 system-view 
[Switch] public-key local create rsa 
The range of public key size is (512 ~ 2048). 
NOTES: If the key...

 303 
# Specify the authentication method for user client002 as publickey , and assign the public key 
Switch001  to the user. 
[Switch] ssh user client002 service-type stelnet authentication-type publickey assign 
publickey Switch001 
3.  Establish a connection between the  SSH client and the SSH server: 
# Specify the private key file and est ablish a connection to the SSH server 
Launch PuTTY.exe to enter the following interface. In the  Host Name (or IP address) text box, enter 
the IP address of the...

 304 
Figure 108 Specifying the private key file 
 
 
Click Open to connect to the server. If the connection is normal, you will be prompted to enter the 
username. After entering the username ( client002), you can enter the config uration interface of the 
server. 
SSH client configuration examples 
When switch acts as client for password authentication 
Network requirements 
As shown in Figure 109 , Switch A (the SSH client) must pass password authentication to log in to Switch 
B (the SSH server)...

 305 
[SwitchB] public-key local create rsa 
The range of public key size is (512 ~ 2048). 
NOTES: If the key modulus is greater than 512, 
It will take a few minutes. 
Press CTRL+C to abort. 
Input the bits of the modulus[default = 1024]: 
Generating Keys... 
++++++++ 
++++++++++++++ 
+++++ 
++++++++ 
# Generate a DSA key pair. 
[SwitchB] public-key local create dsa 
The range of public key size is (512 ~ 2048). 
NOTES: If the key modulus is greater than 512, 
It will take a few minutes. 
Press CTRL+C...