3com 5500-ei pwr Guía De Referencia

 

1-33 

1                   publickey            127.0.0.1             stelnet 

ssh user username authentication-type { all | password | password-publickey | publickey | rsa } 

undo ssh user username authentication-type 

System view 

username: SSH user name, a string of 1 to 184 characters. It cannot contain any of these characters: 

slash (/), backslash (\), colon (:), asterisk (*), question mark (?), less than sign (<), greater than sign (>), 

and the vertical bar sign (|). In addition, the @ sign can appear up to once, the username part (that is, 

the string before the @ sign) cannot be more than 55 characters, and the domain name part cannot be 

more than 128 characters. 

all: Specifies that the authentication mode for the SSH user can be either password authentication or 

publickey authentication.  

password: Specifies the authentication mode for the SSH user as password authentication.  

password-publickey: Specifies the authentication mode for the SSH user as password and publickey. 

publickey: Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key ) 

authentication.  

rsa: Specifies the authentication mode for the SSH user as publickey (RSA key or DSA key ) 

authentication. The authentication modes specified by the rsa  keyword and publickey  keyword are 

implemented in the same way 

 

For the password-publickey authentication type:  

z 

SSH1 client users can access the switch as long as they pass one of the two authentications. 

z 

SSH2 client users can access the switch only when they pass both the authentications. 

Use the ssh user authentication-type command to specify the authentication mode for SSH users on 

the server. 

Use the undo ssh user authentication-type command to remove the configuration.  

The differences between password authentication, publickey authentication, and password-publickey 

authentication are: 

z 

Password authentication is vulnerable to attacks. 

z 

Publickey authentication provides more secure SSH connections than password authentication 

does. The mode is easy to use and prevents illegal operations such as malicious password guess.