496 | Security
www.dell.com | support.dell.com
• ip ssh authentication-retries: Configure the maximum number of attempts that should be used to
authenticate a user.
•
ip ssh connection-rate-limit: Configure the maximum number of incoming SSH connections per minute.
•
ip ssh hostbased-authentication enable: Enable hostbased-authentication for the SSHv2 server.
•
ip ssh key-size: Configure the size of the server-generated RSA SSHv1 key.
•
ip ssh password-authentication enable: Enable password authentication for the SSH server.
•
ip ssh pub-key-file: Specify the file to be used for host-based authentication.
•
ip ssh rhostsfile: Specify the rhost file to be used for host-based authorization.
•
ip ssh rsa-authentication enable: Enable RSA authentication for the SSHv2 server.
•
ip ssh rsa-authentication: Add keys for the RSA authentication.
•
show crypto: Display the public part of the SSH host-keys.
•
show ip ssh client-pub-keys: Display the client public keys used in host-based authentication.
•
show ip ssh rsa-authentication: Display the authorized-keys for the RSA authentication.
Secure Shell Authentication
SSH is disabled by default. Enable it using the ip ssh server enable command.
SSH supports three methods of authentication:
• SSH Authentication by Password
• RSA Authentication of SSH
• Host-Based SSH Authentication
Important Points to Remember for SSH Authentication
• If you enable more than one method, the order in which the methods are preferred is based on the
ssh_config file on the Unix machine.
• When you enable all the three authentication methods, password authentication is the backup method
when the RSA method fails.
• The known_hosts and known_hosts2 files are generated when a user tries to SSH using version 1 or
version 2, respectively.
SSH Authentication by Password
Authenticate an SSH client by prompting for a password when attempting to connect to the Dell Force10
system. This is the simplest methods of authentication and uses SSH version 1.
To enable SSH password authentication, use the
ip ssh password-authentication enable command from
CONFIGURATION mode. To view your SSH configuration, use the
show ip ssh command from EXEC
Privilege mode (Figure 28-10).
To Next Page
Loading...
Need help?
General
