The ssh client assign command assigns a Revest-Shamir-Adleman Algorithm (RSA), Digital Signature Algorithm (DSA) or Elliptic Curves Cryptography (ECC) public key to the SSH server.
The undo ssh client assign command removes the connection between the SSH server and the Revest-Shamir-Adleman Algorithm (RSA), Digital Signature Algorithm (DSA) or Elliptic Curves Cryptography (ECC) public key.
By default, the Revest-Shamir-Adleman Algorithm (RSA), Digital Signature Algorithm (DSA) or Elliptic Curves Cryptography (ECC) public key is not assigned to the SSH server.
ssh client servername assign { rsa-key | dsa-key | ecc-key } keyname
undo ssh client servername assign { rsa-key | dsa-key | ecc-key }
| Parameter | Description | Value |
|---|---|---|
| servername | Specifies the name or IP address of the SSH server. | The name is a string of 1 to 255 characters without blank spaces. |
| rsa-key | Specifies the name of the RSA public key. | - |
| dsa-key | Specifies the name of the DSA public key. | - |
| ecc-key | Specifies the name of the ecc public key. | - |
| keyname | Specifies the public key name of the SSH servers on the SSH client. | The name is a string of 1 to 30 characters without blank spaces. |
Usage Scenario
If the SSH client connects to the SSH server for the first time and the primary authentication is not enabled on the SSH client, you must assign the peer RSA, DSA or ECC public key to the SSH server. Once the authentication of the SSH client on the RSA, DSA or ECC public key of the SSH server succeeds, the SSH client can successfully be connected to the server.
To improve security, it is recommended that you use ECC as the public key.
Prerequisites
The RSA, DSA or ECC public key has been configured on the SSH server.
Precautions
Public keys configured on the SSH server and SSH client must be identical. If different, the authentication on the SSH server fails.