1-22
With first-time authentication enabled, an SSH client that is not configured with the SSH server's host
public key saves the host public key sent by the server without authenticating the server. Attackers may
exploit the vulnerability to initiate man-in-middle attacks by acting as an SSH server. Therefore, it is
recommended to disable first-time authentication unless you are sure that the SSH server is reliable.
Specifying a source IP address/interface for the SSH client
You can configure a souce IP address or the souce IP address by specifying the corresponding
interface for the client to use to access the SSH server. This improves the service manageability when
the SSH client has multiple IP addresses and interfaces
Follow these steps to specify a source IP address/interface for the SSH client:
To do... Use the command... Remarks
Enter system view
system-view
—
Specify a source IP address for
the SSH client
ssh2 source-ip ip-address
Optional
By default, no source IP
address is configured.
Specify a source interface for
the SSH client
ssh2 source-interface
interface-type interface-number
Optional
By default, no source interface
is configured.
Establishing the connection between the SSH client and server
The client’s method of establishing an SSH connection to the SSH server varies with authentication
types.
Follow these steps to establish an SSH connection:
To do... Use the command... Remarks
Enter system view
system-view
—
To Next Page
Loading...
