FTOS Configuration Guide for the C-Series - Force10 Networks

Step Task Command Syntax Command Mode
2 Create shosts by copying the public
RSA key to the to the file shosts in
the diretory .ssh, and write the IP
address of the host to the file.
Figure 80 Creating shosts
cp /etc/ssh/ssh_host_rsa_key.pub /.ssh/shosts
admin@Unix_client# cd /etc/ssh
admin@Unix_client# ls
moduli sshd_config ssh_host_dsa_key.pub ssh_host_key.pub
ssh_host_rsa_key.pub ssh_config ssh_host_dsa_key ssh_host_key
ssh_host_rsa_key
admin@Unix_client# cat ssh_host_rsa_key.pub
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA8K7jLZRVfjgHJzUOmXxuIbZx/
AyWhVgJDQh39k8v3e8eQvLnHBIsqIL8jVy1QHhUeb7GaDlJVEDAMz30myqQbJgXBBRTWgBpLWwL/
doyUXFufjiL9YmoVTkbKcFmxJEMkE3JyHanEi7hg34LChjk9hL1by8cYZP2kYS2lnSyQWk=
admin@Unix_client# ls
id_rsa id_rsa.pub shosts
admin@Unix_client# cat shosts
10.16.127.201, ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA8K7jLZRVfjgHJzUOmXxuIbZx/AyW
hVgJDQh39k8v3e8eQvLnHBIsqIL8jVy1QHhUeb7GaDlJVEDAMz30myqQbJgXBBRTWgBpLWwL/
doyUXFufjiL9YmoVTkbKcFmxJEMkE3JyHanEi7hg34LChjk9hL1by8cYZP2kYS2lnSyQWk=
3 Create a list of IP addresses and usernames that are permitted to SSH in a file called rhosts, as shown
in Figure 81.
Figure 81 Creating rhosts
admin@Unix_client# ls
id_rsa id_rsa.pub rhosts shosts
admin@Unix_client# cat rhosts
10.16.127.201 admin
4 Copy the file shosts and rhosts to the Force10 system.
5 Disable password authentication
and RSA authentication, if
configured
• no ip ssh password-authentication
• no ip ssh rsa-authentication
• CONFIGURATION
• EXEC Privilege
6 Enable host-based authentication. ip ssh hostbased-authentication enable CONFIGURATION
7 Bind shosts and rhosts to
host-based authentication.
ip ssh pub-key-file flash://filename
ip ssh rhostsfile flash://filename
CONFIGURATION
FTOS Configuration Guide, version 7.7.1.0 165