Set up SSH public authentication from host to Cisco MDS switch

来源:互联网 发布:linux将用户添加到组 编辑:程序博客网 时间:2024/05/16 05:45
Steps:
1) Generate ssh key pairs on host.
2) Logon Cisco MDS switch as "root" or "admin", run
    NJRDC9506# config t
    Enter configuration commands, one per line.  End with CNTL/Z.
    NJRDC9506(config)# username admin sshkeyssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7GKY9+Qrfq+NXYgMr4Nf8z/EeE5qxe4ewiZNlf8wep9smPBTXPeAFUJ5OpjNnmv3kRhVe7Gto9YB5iG19UTXoW6lCeDBlAirQYvA1zQz1yi/vxD0osKY+zXRc2o3WAQKrvIC6usjzDigvimaQfxv/nXkWGlP3RapKmS/3R5Zi8f2gWqWMQcNJUk9U/uEd5724NjTeIxDOZrshWFjhbAIWZPGQk8dGZEURlx0UsvMZR/1Eab6eXMTuFE0J6dJnBi+ioanrYtguQLqxEpv7HKt44eXYa1B+uu0cyU/yiYjOmdrTs7NcJPZuBARmlIQFtasbJM+8xakNx7BWMd7qqYbB chenk6@CNRDCHENK6L1C
    NJRDC9506(config)# end

3) Check the public key
    NJRDC9506# show user-account admin
    user:admin
        this user account has no expiry date
        roles:network-admin
        ssh public key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7GKY9+Qrfq+NXYgMr4Nf8z/EeE5qxe4ewiZNlf8wep9smPBTXPeAFUJ5O
pjNnmv3kRhVe7Gto9YB5iG19UTXoW6lCeDBlAirQYvA1zQz1yi/vxD0osKY+zXRc2o3WAQKrvIC6usjzDigvimaQfxv/nXkWGlP3RapKmS/3R5Zi8f2gWqWM
QcNJUk9U/uEd5724NjTeIxDOZrshWFjhbAIWZPGQk8dGZEURlx0UsvMZR/1Eab6eXMTuFE0J6dJnBi+ioanrYtguQLqxEpv7HKt44eXYa1B+uu0cyU/yiYjO
mdrTs7NcJPZuBARmlIQFtasbJM+8xakNx7BWMd7qqYbB chenk6@CNRDCHENK6L1C

4) Test the setup, issuing MDS CLI from host  by ssh should have no password prompt.

Tips:
Clean public authentication
    NJRDC9506# config t
    Enter configuration commands, one per line.  End with CNTL/Z.
    NJRDC9506(config)# no username admin sshkeyssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7GKY9+Qrfq+NXYgMr4Nf8z/EeE5qxe4ewiZNlf8wep9smPBTXPeAFUJ5OpjNnmv3kRhVe7Gto9YB5iG19UTXoW6lCeDBlAirQYvA1zQz1yi/vxD0osKY+zXRc2o3WAQKrvIC6usjzDigvimaQfxv/nXkWGlP3RapKmS/3R5Zi8f2gWqWMQcNJUk9U/uEd5724NjTeIxDOZrshWFjhbAIWZPGQk8dGZEURlx0UsvMZR/1Eab6eXMTuFE0J6dJnBi+ioanrYtguQLqxEpv7HKt44eXYa1B+uu0cyU/yiYjOmdrTs7NcJPZuBARmlIQFtasbJM+8xakNx7BWMd7qqYbB chenk6@CNRDCHENK6L1C
    NJRDC9506(config)# end

3) Check the public key
     NJRDC9506# show user-account admin