SSH access to powerconnect 3324

Question

Hi,

We have 4 power connect 3324. I have already configured them to work with ssh.

I would like to know if I can send my public key to them, so I need no password to get in every time I ssh them.

The reason I need this is to have an automated access to the switch, done using the public key.

ssh works without problems, but I need to type the password, something my automated script can't do :(

switch data: (3 of 4)
# show version
SW version 1.1.0.42 ( date 11-Jan-2004 time 12:50:35 )
Boot version 1.0.0.13 ( date 11-May-2003 time 14:58:20 )
HW version 00.00.02

# show version (1 of 4)
SW version 1.0.0.52 ( date 29-Jun-2003 time 19:04:06 )
Boot version 1.0.0.13 ( date 11-May-2003 time 14:58:20 )
HW version 00.00.01

# show system ... snipped
MAC Address: 00:0f:1f:33:f1:2b
MAC Address: 00:0f:1f:33:fe:90
MAC Address: 00:0f:1f:33:fa:3d
MAC Address: 00:0d:56:42:a1:f5

Thanks,

Ivan

GregG1 · Answer

To accomplish this, you would need to complete the following steps:

Enable public key authentication using the "ip ssh pubkey-auth" command
Create a public key-chain using the "crypto key pubkey-chain ssh"
Manually input the public key for the user using the "user-key" and "key-string" commands
Create a user on the switch with no password using the "username" command

For more information on SSH commands, see the online CLI Guide at the following link:

<ADMIN NOTE: Broken link has been removed from this post by Dell>

ikp · Answer

Sorry but I still can not connect by pubkey with ssh, although user/passwd work, even with this added to my config:

username root password d41d8cd98f00b204e9800998ecf8427e encrypted
ip ssh pubkey-auth
crypto key pubkey-chain ssh
user-key root dsa
key-string row AAAAB3NzaC1kc3MAAACBAPJVDEkdGiK0M8UMQphK
... snip ...
key-string row YAvKlck8Z6jwH3R/XLHPlj/sVpuG
exit
exit

Is this a "root" user without password? something else? Do I need an extra step?

I am sshing from a linux box, version:
OpenSSH_3.7.1p2, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003

And reported by switch as:
SSH-2.0-OpenSSH_3.7.1p2

Ivan

GregG1 · Answer

You have the necessary configuration on the switch to allow for authentication using the key-chain. The user you have created with no password should be granted access with guest privileges. If you want the user to have admin privileges, you would add "level 15" to your "username" command.

With this configuration, you would simply need to save the key generated by puttygen as a private key. When connecting via putty, you would need to specify the private key in the SSH/Auth section.

I verified this configuration using OpenSSH 3.8p1 in SUSE 9.1.

ikp · Answer

That is what I am doing!!!

I always login with ssh using keys. No problems there, and I have checked permissions just in case.

From my linux box I just type, and it always asks for user:

ssh root@192.168.1.1

14-Feb-2000 05:30:48 %MSCM-I-NEWTERM: New SSH connection from 192.168.1.10
User Name:root

switch B>

I would like to know if the "User Name:" part can be overriden, just as it works on unix when you login using key.

Thanks,

Ivan

GregG1 · Answer

There is no way to override the Username prompt. With 'ip ssh pubkey-auth' enabled, a valid user must be input for both the Login and Username prompts. If this setting is removed, anything can be input for the Login prompt.

Networking General

SSH access to powerconnect 3324

Was this post helpful?