Admin Guide

VSP switch as client
The VSP switch acting as the SSHv2 client generates a DSA public and private server key pair. The
public part of the key for DSA is stored in the following location:
/intflash/.ssh/dsa_key_rwa
The public part of the key must be copied to the SSH server and be named according to the naming
requirement of the server.
If the server is a VSP device, please consult Table 38: DSA authentication access level and file
name on page 156 for proper naming convention.
If a DSA key pair does not exist, you can generate the DSA key pair using the ssh dsa-user-key
[WORD<1–15>][size <1024–1024>] command.
You need to copy the DSA public key to the SSHv2 server that you connect to using the VSP as a
client. RSA is not supported when using the VSP switch as a client, but you can use RSA when the
VSP switch is acting as the server.
VSP switch as server
After you install one of the SSHv2 clients you must generate a client and server key using the RSA
or DSA algorithms.
To authenticate an SSHv2 client using DSA, the administrator must copy the public part of the client
DSA key to /intflash/.ssh directory on the VSP modular switch that is acting as the SSHv2 server.
The file that is copied over to the SSHv2 server must be named according to
Table 38: DSA
authentication access level and file name on page 156.
DSA authentication access level and file name
The following table lists the access levels and file names that you must use to store the SSHv2
client authentication information using DSA onto the VSP modular switch acting as the SSHv2
Server.
Table 38: DSA authentication access level and file name
Client key format or WSM
Access level File name
Client key in non IETF and IETF format
with enhanced secure mode disabled
Note:
The VSP switch supports IETF and
non-IETF for DSA.
RWA /intflash/.ssh/dsa_key_rwa
RW /intflash/.ssh/dsa_key_rw
RO /intflash/.ssh/dsa_key_ro
L3 /intflash/.ssh/dsa_key_rwl3
L2 /intflash/.ssh/dsa_key_rwl2
L1 /intflash/.ssh/dsa_key_rwl1
Client key in enhanced secure mode
administrator /intflash/.ssh/dsa_key_admin
operator /intflash/.ssh/dsa_key_operator
security /intflash/.ssh/dsa_key_security
privilege /intflash/.ssh/dsa_key_priv
auditor /intflash/.ssh/dsa_key_auditor
Secure Shell
January 2017 Administering Avaya VSP 7200 Series and 8000 Series 156
Comments on this document? [e-mail]