Command Reference Guide

322 ● rsa local-key-pair create 3Com Router 5000 Family and Router 6000 Family
Command Reference
rsa local-key-pair create
Purpose Use the rsa local-key-pair create command to generate the local RSA host
key pair and server key pair.
Syntax rsa local-key-pair create
Parameters None
Example Generate the local host key pair and server key pair.
[3Com] rsa local-key-pair create
The name for the keys will be: 3Com _Host
% You already have RSA keys defined for rtvrp_Host
% Do you really want to replace them? [yes/no]:y
Choose the size of the key modulus in the range of 512 to 2048 for your
Keys.
Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus [512]:512
Generating keys...
.....++++++++++++
........................++++++++++++
..........++++++++
............................++++++++
View This command can be used in the following views:
■ System view
Description Executing this command generates two files, hostkey and serverkey, each containing
a pair of local public key and private key. While the key pair in the serverkey file is
updated automatically at regular intervals, the key pair in the hostkey file will not
change after their creation.
If the key pairs exist when you enter this command, the system warns that the
existing keys are to be replaced. The names of the generated key pairs are respectively
router name+ server and router name + host, for example, 3Com_host and
3Com_server. This command is not stored in the configuration file.
After you enter this command, the system asks you to input the number of digits for
the host key pair. The server key pair and the host key pair have at least 128 digits of
difference. The minimum length of server key pair and host key pair is 512 digits and
the maximum length is 2048 digits. If there have been key pairs, you need to confirm
whether to change them. The default key pair length is 1024 digits.
To log onto the router through SSH, you must first generate local RSA key pairs using
the rsa local-key-pair create command. You only need to execute this
command once and do not need to execute it again at reboot.