Configure Secure Shell (SSH) server parameters
Full book title 460
Configure Secure Shell (SSH) server parameters
Configuring SSH is performed on the Configuration > Network > SSH Servers page. Parameters
are as follows:
Enable SSH Servers
When checked, this checkbox enables the SSH servers on the router.
SSH Server n parameters
The router supports eight individual SSH servers that are configured independently using the
options described below.
Enable SSH Server
When enabled, enables the SSH server.
Use TCP port p
The TCP port number (default 22) that the SSH server will use to listen for incoming
connections. (Port 22 is the standard SSH port).
Allow up to n connections
The number of sockets listening for new SSH connections (default 1).
Host Key 1 Filename
The filename of either an SSH V1 or V2 host key. It is highly recommended that the filename be
prefixed with priv to ensure that the key cannot be easily accessed and compromised. This
key may be generated using the facilities described in the Certificates section of this manual.
Host Key 2 Filename
The filename of either an SSH V1 or V2 key as above.
Note The maximum length for these filenames is 12 characters and they must use the DOS 8.3
file naming convention.
Maximum login time s seconds
The maximum length of time, in seconds, a user can successfully complete the login
procedure once the SSH socket has been opened. The socket is closed if the user has not
completed a successful login within this period.
Maximum login attempts n
The maximum number of login attempts allowed in any one session before the SSH socket
will be closed.
Use Deflate compression No/Yes, level n
The radio buttons select whether or not DEFLATE compression will be used. If compression is
selected, the compression level is chosen from the drop-down list.
Enable Port Forwarding
When enabled, the router accepts traffic on ports other than 23. This functionality is for use
with SSH client applications, such as PuTTY, that have port forwarding capability. For example,
one the SSH connection is active, traffic for the HTTP port 80 can be sent to the router
securely.