3Com 5500G-EI Command Reference Guide - Page 519

SSH Configuration Commands 519 Description Use the rsa local-key-pair create command to create local RSA host key pair and server key pair. If you have configured RSA key, the system gives an alarm after using this command and prompts that the existing one will be replaced. The key naming format is switch name plus server and switch name plus host, for example, SW5500_host and SW5500_server. The configuration result of this command will not be stored in the configuration file. The system prompts you to key in bit range, for which, the server key pair must be at least 128 bits longer than the host key pair. The maximum bit range of both key pairs is 2048 bits and the minimum is 512. If there have been key pairs, the system will prompts you to decide whether to modify them. For a successful SSH logon, you must configure and generate the local RSA key pairs. To generate local key pairs, you just need to execute the command once, with no further action required even after the system is rebooted. Related command: rsa local-key-pair destroy. Example To create local host key pair and server key pair, enter the following: system-view System View: return to User View with Ctrl+Z. [SW5500]rsa local-key-pair create The key name will be: SW5500_Host % You already have RSA keys defined for SW5500_Host % Do you really want to replace them? [yes/no]:y Choose the size of the key modulus in the range of 512 to 2048 for your Keys. NOTES: If the key modulus is greater than 512, It will take a few minutes. How many bits in the modulus [512]:512 Generating keys rsa local-key-pair Syntax destroy rsa local-key-pair destroy View System view Parameter None Description Use the rsa local-key-pair destroy command to remove all RSA key pairs at the server, including Host key pair and Server key pair.