H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 310)

296
Step Command Remarks
2. Specify a source IP
address or
interface for the
SSH client.
• Specify a source IPv4 address or interface for the
SSH client
ssh client source { ip ip-address | interface
interface-type interface-number }
• Specify a source IPv6 address or interface for the
SSH client
ssh client ipv6 source { ipv6 ipv6-address
|.interface interface-type interface-number }
Use either command
By default, an SSH client
uses the IP address of the
outbound interface
defined by the route to the
SSH server to access the
SSH server.
Configuring whether first-time authentication is supported
When the access controller connects to the SSH server as an SSH client, you can configure whether the
access controller supports first-time authentication.
• With first-time authentication, when an SSH client not configured with the server host public key
accesses the server for the first time, the user can continue accessing the server, and save the host
public key on the client. When accessing the server again, the client will use the saved server host
public key to authenticate the server.
• Without first-time authentication, a client not configured with the server host public key will refuse to
access the server. To enable the client to access the server, you must configure the server host public
key and specify the public key name for authentication on the client in advance.
Enabling first-time authentication
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable the access controller to
support first-time
authentication.
ssh client first-time enable
Optional.
By default, first-time authentication
is supported on a client.
Disabling first-time authentication
For successful authentication of an SSH client not supporting first-time authentication, the server host
public key must be configured on the client and the public key name must be specified.
To disable first-time authentication:
Step Command Remarks
1. Enter system view. system-view N/A
2. Disable first-time
authentication support.
undo ssh client first-time
By default, first-time authentication
is supported on a client.
3. Configure the server host
public key.
See " Configuring a client public
key "
The method for configuring the
server host public key on the client
is similar to that for configuring
client public key on the server.
4. Specify the host public key
name of the server. ssh client authentication server
server assign publickey keyname
N/A