Developers Guide

Version Description
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
pre-6.1.1.0 Introduced on the E-Series.
Usage
Information
This command specifies the file used for the host-based authentication. The creates/ file overwrites
the flash://ADMIN_DIR/ssh/knownhosts file and deletes the user-specified file. Even though this
command is a global configuration command, it does not appear in the running configuration because you
only need to run this command once.
The file contains the OpenSSH-compatible public keys of the host for which host-based authentication is
allowed. An example known host file format:
poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/
QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tK
BU3t
ReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNx
PDpEn WIMPJi0ds= ashwani@poclab4
NOTE: For rhostfile and pub-key-file, the administrator must FTP the file to the chassis.
Example
DellEMC# conf
DellEMC(conf)# ip ssh pub-key-file flash://knownhosts
DellEMC(conf)#
Related
Commands
● show ip ssh client-pub-keys — displays the client-public keys used for the host-based authentication.
ip ssh mac
Configure the list of MAC algorithms supported on both SSH client and SCP.
Syntax
ip ssh mac mac-list
Parameters
mac mac-list
Enter the keyword mac then a space-delimited list of message authentication code
(MAC) algorithms supported by the SSH client. The following MAC algorithms are
available.
When FIPS mode is enabled:
● hmac-sha2–256
● hmac-sha1
● hmac-sha1–96
When FIPS mode is disabled:
● hmac-sha2-256
● hmac-sha1
● hmac-sha1–96
● hmac-md5
● hmac-md5-96
Defaults
The default list of MAC algorithm is in the order as shown below:
When FIPS mode is enabled:
● hmac-sha2–256
● hmac-sha1
Security 1405