Generating Local Dsa Or Rsa Key Pairs; Enabling The Ssh Server Function - HP 12500 Series Configuration Manual

Task
Configuring an SSH user
Setting the SSH management parameters

Generating local DSA or RSA key pairs

DSA or RSA key pairs are required for generating the session key and session ID in the key and algorithm
negotiation stage, and can also be used by a client to authenticate the server. When a client tries to
communicate with a server, it compares the public key that it receives from the server with the server
public key that it saved locally. If the keys are consistent, the client uses the public key to authenticate the
digital signature that receives from the server. If the digital signatures are consistent, the authentication
succeeds.
To support SSH clients that use different types of key pairs, generate both DSA and RSA key pairs on the
SSH server.
Configuration guidelines
SSH1 does not support the DSA algorithm.
•
• The public-key local create rsa command generates a server key pair and a host key pair for RSA.
Each of the key pairs consists of a public key and a private key. The public key in the server key pair
of the SSH server is used in SSH1 to encrypt the session key for secure transmission of the key. As
SSH2 uses the DH algorithm to generate the session keys both on the SSH server and client, no
session key transmission is required in SSH2 and the server key pair is not used.
The public-key local create dsa command generates only the host key pair.
•
Configuration procedure
To generate local DSA or RSA key pairs on the SSH server:
Step
1. Enter system view.
2. Generate DSA or RSA key
pairs.

Enabling the SSH server function

The SSH server function on the device allows clients to communicate with the device through SSH.
When the device acts as an SCP server, only one SCP user is allowed to access to the SCP server at one
time.
To enable the SSH server function:
Step
1. Enter system view.
2. Enable the SSH server
function.
Remarks
Required for publickey authentication users and
optional for password authentication users.
Optional.
Command
system-view
public-key local create { dsa | rsa }
Command
system-view
ssh server enable
211
Remarks
N/A
Neither DSA nor RSA key pairs
existing by default.
Remarks
N/A
Disabled by default.