Comware

 View Only

  • 1.  HPE-5510, HP-1950 and Aruba 2530

    Posted Mar 30, 2025 06:23 AM

    Hi,

    I want to configure SSH Key based Authentication on HPE-5510 / HP-1950 and Aruba-2530

    Can anyone guide me how to configure the same 

    Manish



  • 2.  RE: HPE-5510, HP-1950 and Aruba 2530

    Posted Mar 31, 2025 02:09 AM

    For HPE 5510 (Comware OS)

    # Enter system view
    system-view

    # Create a local user with SSH and RSA access
    local-user admin
     password irreversible-cipher YOUR_PASSWORD
     service-type ssh
     authorization-attribute user-role network-admin
     quit

    # Enable the SSH server
    stelnet server enable

    # Generate local RSA key pair (if not already generated)
    public-key local create rsa

    # Import your public key (you can paste from your PC's `id_rsa.pub`)
    public-key local create rsa
    #
    public-key peer user-key
     key-string
      <paste your public key here, no line breaks>
      quit
     quit

    # Bind key to user
    local-user admin
     rsa peer user-key
     quit

    # Enable VTY and SSH
    user-interface vty 0 4
     authentication-mode scheme
     protocol inbound ssh
     quit

    # Save config
    save force

    For HP1950 (This offers only Web Based and Limited SSH Key Support)

    Go to Security > SSH and if your firmware supports it, you have to upload the user public key. If it doesn't then you will be limited to use password-based SSH for this model.

    For Aruba 2530 (Aruba OS):

    # Enter config mode
    configure terminal

    # Create user with SSH public key
    crypto key generate ssh rsa
    user admin class manager
      ssh public-key <paste your SSH public key here>
    exit

    # Enable SSH
    ip ssh
    crypto key generate ssh rsa

    # Configure VTY access
    line vty 0 4
     login local
     transport input ssh
    exit

    write memory



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------

    Original Message


  • 3.  RE: HPE-5510, HP-1950 and Aruba 2530

    Posted Mar 31, 2025 05:19 AM

    Hi

    Thanks

    Since the switches are in production, hope it will not create any issue ?


    Original Message


  • 4.  RE: HPE-5510, HP-1950 and Aruba 2530

    Posted Mar 31, 2025 05:42 AM

    Well, the VTY Access (Remote Access) will for sure cause issues for the administrators who will manage the device Remotely. I would suggest you to do the changes locally (not from an SSH Session). Try to perform changes when there is low-usage (during after hours maybe). Also, backup the configuration just in case.



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------

    Original Message


  • 5.  RE: HPE-5510, HP-1950 and Aruba 2530

    Posted Mar 31, 2025 07:01 AM

    Hi,

    I am the only person locally or remotely accessing, so that way there is no issue.

    But to access it locally will be challenge since no laptop to access it and also the console cable which is not with me

    So will it be ok if I can access using SSH and configure as mentioned ?


    Original Message


Related Content