Admin Guide

SSH Client Secure Shell (SSH) Secure Copy (SCP)
that a DSA key has been
generated.
OpenSSH
Unix Solaris 2.5 / 2.6
• Supports SSHv2 clients.
• Authentication:
- RSA is supported when the
switch acts as a server. The VSP
switch does not support RSA as a
client.
- DSA
- Password
• Provides a keygen tool.
• It creates both RSA and DSA
keys.
• Client distribution includes an SCP
client that is supported on The VSP
modular switch.
VSP switch as client
The VSP switch acting a the SSHv2 client generates a DSA public and private server key pair. The
public part of the key for DSA is stored in the following location:
/intflash/.ssh/dsa_pub.key
The public part of the key must be copied to the SSH server and be named according to the naming
requirement of the server.
If the server is a VSP device, please consult
Table 38: DSA authentication access level and file
name on page 149 for proper naming convention.
If a DSA key pair does not exist, then the VSP modular switch automatically generates one when
you enable the SSHv2 server. You can also generate the DSA key pair using the ssh dsa-user-
key [WORD<1–15>][size <512-1024>] command.
You need to copy the DSA public key to the SSHv2 server that you connect to using the VSP as a
client. RSA is not supported when using the VSP switch as a client, but you can use RSA when the
VSP switch is acting as the server.
VSP switch as server
After you install one of the SSHv2 clients you must generate a client and server key using the RSA
or DSA algorithms.
To authenticate an SSHv2 client using DSA, the administrator must copy the public part of the client
DSA key to /intflash/.ssh directory on the VSP modular switch that is acting as the SSHv2 server.
That file that is copied over to the SSHv2 server must be named according to
Table 38: DSA
authentication access level and file name on page 149.
DSA authentication access level and file name
The following table lists the access levels and file names that you must use to store the SSHv2
client authentication information using DSA onto the VSP modular switch acting as the SSHv2
Server.
Secure Shell
October 2015 Administering Avaya VSP 7200 Series and 8000 Series 148
Comments on this document? [e-mail]