Qtech QSW-2910-09T-POE-AC/DC Руководство пользователя онлайн [146/212] 481587

+7(495) 797-3311 www.qtech.ru

Москва, Новозаводская ул., 18, стр. 1

146

can be used after loading. Configured key is stored in Flash storage which will be load when

system booting. It also can load the key stored in Flash storage by command line when system

booting.

If configured key is not ESA key or public and private key are not matched, user cannot log in

by SSH.

Keyfile contains explanation and key explain line and the key. Explain line must contain ―:‖ or

space. Key contains the key coded by Base64, excluding ―:‖and space. Private keyfile cannot

contain public key. Private keyfile cannot use password to encrypt.

1. Configure default key. The command is as following:

Crypto key generate rsa

Example:

!Configure SSH key to be default key

QTECH#crypto key generate rsa

2. Download or upload key by tftp or ftp. The command is as following:

load keyfile { public | private } tftp server-ip filename

load keyfile { public | private } ftp server-ip filename username passwd

upload keyfile { public | private } tftp server-ip filename

upload keyfile { public | private } ftp server-ip filename username passwd

Example:

!Download keyfile pub.txt from tftp server 1.1.1.1 to be SSH public

key

QTECH#load keyfile public tftp 1.1.1.1 pub.txt

3. Clear configured key. This command will clear all keyfiles storaged in Flash storage. The

configuration command is as following:

crypto key zeroize rsa

Example:

!Clear configured SSH key

QTECH#crypto key zeroize rsa

4. Load new key. After configuring new SSH key, it restored in Flash storage without loading.

This command can read configured key from Flash storage and update the current key.

When system booting, it will detect Flash storage, if SSH key is configured, it will load

automatically. The configuration command is as following:

crypto key refresh