Configuring user authentication using the CLI

This procedure describes how use CLI commands to configure remote user authentication for an existing "admin" user account.

On a Central Management System appliance, the account is used for logging in to a managed appliance to establish an SSH connection. On a managed appliance, the account is used to log in to the Central Management System appliance to announce itself.

Note

See the ssh and cmc commands in the CLI Reference for advanced authentication options.

To configure password authentication:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Specify the "password" authentication type.
On a Central Management System appliance:
cmc appliance <identityID> authtype password
On a managed appliance:
cmc client server auth authtype password
Specify the remote user account.
On a Central Management System appliance, the account is used to log in to a managed appliance.
cmc appliance <applianceID> auth password username <username>
On a managed appliance, the account is used to log in to the Central Management System appliance:
cmc client server auth password username <username>
Specify the password used to authenticate the remote user.
On a Central Management System appliance:
cmc appliance <applianceID> auth password password <password>
On a managed appliance:
cmc client server auth password password <password>
Save your changes:
```
hostname (config) # write memory
```

To configure SSH-DSA2 authentication:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Specify the SSH-DSA2 authentication type.
On a Central Management System appliance:
cmc appliance <applicationID> authtype ssh-dsa2
On a managed appliance, use the following command instead:
cmc client server auth authtype ssh-dsa2
Specify the remote user account.
On a Central Management System appliance, the account is used to log in to a managed appliance:
cmc appliance <applianceID> auth ssh-dsa2 username <username>
On a managed appliance, the account is used to log in to the Central Management System appliance:
cmc client server auth ssh-dsa2 username <username>
Specify the existing named identity used to authenticate the remote user.
On a Central Management System appliance:
cmc appliance <applianceID> auth ssh-dsa2 identity <identityName>
On a managed appliance:
cmc client server auth ssh-dsa2 identity <identityName>
Save your changes:
```
hostname (config) # write memory
```

To configure SSH-RSA2 authentication:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Use the following command to specify the SSH-RSA2 authentication type:
cmc appliance <applianceID> authtype ssh-rsa2
On a managed appliance, use the following command instead:
cmc client server auth authtype ssh-rsa2
On a Central Management System appliance, use the following command to specify the name of the remote user to log in to the managed appliance:
cmc appliance <applianceID> auth ssh-rsa2 username <username>
On a managed appliance, use the following command to specify the name of the remote user to log in to the Central Management System appliance:
cmc client server auth ssh-rsa2 username <username>
Use the following command to specify the existing named identity used to authenticate the remote user:
cmc appliance <applianceID> auth ssh-rsa2 identity <identityName>
On a managed appliance, use the following command instead:
cmc client server auth ssh-rsa2 identity <identityName>
Save your changes:
```
hostname (config) # write memory
```

Example

The following example configures a Central Management System appliance with SSH-RSA2 authentication parameters used to log in to the NX-04 managed appliance:

hostname (config) # cmc appliance NX-04 auth authtype ssh-rsa2
hostname (config) # cmc appliance NX-04 auth ssh-rsa2 username cmcadmin2
hostname (config) # cmc appliance NX-04 auth ssh-rsa2 identity admin2

The following example configures a managed appliance with SSH-DSA2 authentication parameters used to log in to the Central Management System appliance:

hostname (config) # cmc client server auth authtype ssh-dsa2
hostname (config) # cmc client server auth ssh-dsa2 username cmcadmin3
hostname (config) # cmc client server auth ssh-dsa2 identity admin3