NE40E refused public-key signature despite accepting key!

akochanov · Created Mar 23, 2018 23:00:11

NE40E refused public-key signature despite accepting key! My HW and configuration

display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 8.150 (NE40E V800R009C10SPC200)
Copyright (C) 2012-2017 Huawei Technologies Co., Ltd.
HUAWEI NE40E-X8

rsa peer-public-key user01_key
public-key-code begin
...
public-key-code end
peer-public-key end

ssh user user01
ssh user user01 authentication-type rsa
ssh user user01 assign rsa-key user01_key
ssh user user01 service-type all

I have same rsa-key on my 6720 and 5700 switches and I dont have problem with it.
I tried generate key into puttygen and securecrt I have same problem like above.
I need your help.

StarOfWest · Created Mar 26, 2018 06:22:42

Please refer to the attached KB.
http://support.huawei.com/enterprise/en/knowledge/EKB0000252891

akochanov · Created Mar 26, 2018 09:09:36

Thank you!
But I wrote above that this is a working key, which I use on 5700 and 6720 switches. Which I converted to HEX. Or conversion procedure is somehow different? See the attachment, why on two devices the same key looks different, although the procedure for adding it is the same everywhere

This article contains more resources

You need to log in to download or view. No account? Register

x

StarOfWest · Created Mar 26, 2018 14:58:02

I'm afraid I cannot see yet your jpg file. It waits to be audited.

Meanwhile, you can try to generate the key again using different parameters, for example use SSH2 RSA + 2048 Key.

Also it's possible to describe more the meaning of " refused public-key signature despite accepting key"

akochanov · Created Mar 26, 2018 23:20:31

This message generates putty.
This is the securecrt
https://ibb.co/jzPu77

akochanov · Created Mar 28, 2018 17:35:44

Any ideas? Maybe, will I open case in tech support?

StarOfWest · Created Mar 29, 2018 06:24:27

I have NE40E in my network, but for me it's working well. The procedure described in the KB it's good. It's true that I'm not using the same version as you.

It's a good idea to open a ticket to TAC, here there is the hotline:
http://e.huawei.com/en/service-hotline-query

akochanov · Created Apr 5, 2018 18:09:24

SOLVED. Creating a local user is mandatory. Who would have thought of that :@

NE40E refused public-key signature despite accepting key!

This article contains more resources

Third Party’s Trade Secret

My Followers

Enterprise

Consumer

Corporate

Carriers

NE40E refused public-key signature despite accepting key!

This article contains more resources

Third Party’s Trade Secret

My Followers