SSH server configuration task list

Task

Remarks

Generating local key pairs

Required.

Enabling the SSH server function

Required for Stelnet, SFTP and SCP servers.

Enabling the SFTP server function

Required only for SFTP server.

Configuring the user interfaces for SSH clients

Required.

Configuring a client's host public key

Required if the following conditions exist:

  • Publickey authentication is configured for users.

  • The clients directly send the public keys to the server for validity check.

Configuring the PKI domain of the client certificate

See "Configuring PKI."

Required if the following conditions exist:

  • Publickey authentication is configured for users.

  • The clients send the public keys to the server through digital certificates for validity check.

The PKI domain must have the CA certificate to verify the client certificate.

Configuring an SSH user

Required for publickey authenticated users.

Optional for other authentication users.

Setting the SSH management parameters

Optional.

Setting the DSCP value for packets sent by the SSH server

Optional.