3com 5500-ei pwr Reference Guide

Page of 1314
 
1-25 
System View: return to User View with Ctrl+Z. 
[Sysname] rsa peer-public-key 123 import sshkey abc 
ssh authentication-type default 
Syntax 
ssh authentication-type default { all | password | password-publickey | publickey | rsa } 
undo ssh authentication-type default 
View 
System view 
Parameters 
all: Specifies either the password authentication or the publickey authentication for SSH users.  
password: Specifies the authentication mode for SSH users as password authentication.  
password-publickey: Specifies that both the password and the publickey must be authenticated for 
SSH users.  
publickey: Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key ) 
authentication.  
rsa: Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key ) 
authentication. The authentication modes specified by the rsa  keyword and publickey  keyword are 
implemented in the same way. 
Description 
Use the ssh authentication-type default command to specify a default authentication mode for SSH 
users. After this command is configured, when an SSH user is added by using the ssh user command, 
the default authentication mode is adopted for the user if no authentication mode is specified by using 
the ssh user authentication-type command.  
Use the undo ssh authentication-type default command to remove the specified default 
authentication mode. That is, no default authentication mode is specified for SSH users. In this case, 
when an SSH user is added, you must specify an authentication mode for the user at the same time.  
By default, no default authentication mode is specified.  
The differences between password authentication, publickey authentication, and password-publickey 
authentication are: 
Password authentication is vulnerable to attacks. 
Publickey authentication provides more secure SSH connections than password authentication 
does. The mode is easy to use and prevents illegal operations such as malicious password guess. 
After the configuration, the subsequent authentications are implemented automatically without 
asking you to enter the password. 
Password-publickey authentication takes the advantages of both password authentication and 
publickey authentication. An SSH user must pass both types of authentication before logging in. 
The combination of password and publickey authentications eliminates the vulnerability of the SSH 
server caused by the clients. You can use password-publickey authentication together with AAA for 
authentication and authorization of users. 
Related commands: display ssh user-information