Admin Guide

Table 38: DSA authentication access level and file name
Client key format or WSM Access level File name
Client key in non IETF and IETF format
with enhanced secure mode disabled
Note:
The VSP switch supports IETF and
non-IETF for DSA.
RWA /intflash/.ssh/dsa_key_rwa
RW /intflash/.ssh/dsa_key_rw
RO /intflash/.ssh/dsa_key_ro
L3 /intflash/.ssh/dsa_key_rwl3
L2 /intflash/.ssh/dsa_key_rwl2
L1 /intflash/.ssh/dsa_key_rwl1
Client key in enhanced secure mode
administrator /intflash/.ssh/dsa_key_admin
operator /intflash/.ssh/dsa_key_operator
security /intflash/.ssh/dsa_key_security
privilege /intflash/.ssh/dsa_key_priv
auditor /intflash/.ssh/dsa_key_auditor
The VSP modular switch generates an RSA public and private server key pair. The public part of the
key for RSA is stored in /intflash/.ssh/ssh_key_rsa_pub.key. If an RSA key pair does not exist, then
the VSP modular switch automatically generates one when you enable the SSH server. To
authenticate a client using RSA, the administrator must copy the public part of the client RSA key to
the VSP switch.
RSA authentication access level and file name
The following table lists the access levels and file names you can use for storing the SSH client
authentication information using RSA.
Table 39: RSA authentication access level and file name
Client key format or WSM
Access level File name
Client key in IETF format with enhanced
secure mode disabled.
RWA /flash/.ssh/rsa_key_rwa
RW /flash/.ssh/rsa_key_rw
RO /flash/.ssh/rsa_key_ro
L3 /flash/.ssh/rsa_key_rwl3
L2 /flash/.ssh/rsa_key_rwl2
L1 /flash/.ssh/rsa_key_rwl1
Client key with enhanced secure mode
enabled
administrator /intflash/.ssh/rsa_key_admin
operator /intflash/.ssh/rsa_key_operator
security /intflash/.ssh/rsa_key_security
privilege /intflash/.ssh/rsa_key_priv
auditor /intflash/.ssh/rsa_key_auditor
Secure Shell fundamentals
October 2015 Administering Avaya VSP 7200 Series and 8000 Series 149
Comments on this document? [e-mail]