Cisco Catalyst 2960-X - Page 144

PurposeCommand or Action
•
Specify the time-out value in seconds; the default is 120 seconds.
The range is 0 to 120 seconds. This parameter applies to the SSH
Example:
Switch(config)# ip ssh timeout 90
negotiation phase. After the connection is established, the Switch
uses the default time-out values of the CLI-based sessions.
authentication-retries 2
By default, up to five simultaneous, encrypted SSH connections for
multiple CLI-based sessions over the network are available (session
0 to session 4). After the execution shell starts, the CLI-based session
time-out value returns to the default of 10 minutes.
•
Specify the number of times that a client can re-authenticate to the
server. The default is 3; the range is 0 to 5.
Repeat this step when configuring both parameters.
(Optional) Configures the virtual terminal line settings.Use one or both of the following:
Step 5
•
line
vtyline_number[ ending_line_number ]
•
Enters line configuration mode to configure the virtual terminal line
settings. For line_number and ending_line_number, specify a pair
of lines. The range is 0 to 15.
•
transport input ssh
•
Specifies that the Switch prevent non-SSH Telnet connections. This
limits the router to only SSH connections.
Example:
Switch(config)# line vty 1 10
or
Switch(config-line)# transport input
ssh
Returns to privileged EXEC mode.end
Example:
Switch(config-line)# end
Step 6
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 7
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config
Step 8
startup-config
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
120 OL-29048-01
Configuring Secure Shell (SSH)
Configuring the SSH Server