Obtaining a host key using the CLI

Prev Next

Use the command in this section to obtain the public host key for the default HA interface from each node. This is the key that you will import into the global host-keys database of the other node. You can also use this command to obtain the public host key for the backup HA interface, if one is configured.

Important

You must obtain the RSA v2 key.

To obtain the host key:
  1. Log in to the CLI of one node.

  2. View the keys:

    node-hostname > show ssh server host-keys interface <interface name>

    where <interface name> is the name of the default HA interface.

  3. Locate the RSA v2 host key entry.

  4. Copy the key string, including the double quotation marks. The key should start with the IP address of the primary node, not the hostname.

  5. Do one of the following:

  6. (Optional) Repeat the previous three steps for the backup HA interface, if one is configured. Specify the backup HA interface for the <interfaceName> parameter instead of the default HA interface.

  7. Repeat these steps on the other node to obtain its key or keys.

Example

This example displays the host keys for node2, which uses ether3 as the default HA interface. The RSA v2 key is highlighted for illustration.

node2 > show ssh server host-keys interface ether3
...

Host Keys:
    RSA v1 host key: 2048 65537 24774369...
    RSA v2 host key: "172.16.127.145 ssh-rsa AAAAB3NAfgbzYulDSIxOKZTh2VBnKsy0qRWrCps
64Itlh6iRlr7JxazaC1yc2EAAAADAQABAAABAQCzd5JwKtk5BjHLe/jxkF0JzWcXOTw9l0bz2Sctk
Qrihkqg/zXqrmxtE6Z2f2oxUobcax+eqS6QMp5nnbPTDLJTbHCNnjkawdDC6IhLk0BdncChpTS9E+
ZF/F67YwpuIpgraWrchTCwfG+jAtTAGsygD0VVrchTCcncChpTShf5kdkasasdf88d8udlm9s24fh
y7cns098dsafedqw3fjfjfdops/sjejsafdyd+dd439vn19/+djNYdelwhtje8Lidn63kd8UHTdke
louYDMwDFEjnvx7+9E+ZF/F67YwpuIpgraWcoXuZxZKy13wfsJDhMfWk/nrEqicQ4BJN4M/8AzP+f
d9sda3li"    
    DSA v2 host key: 10.11.121.13 ssh-dss AAAAB3UxuQ...
...