689
Usage guidelines
Periodically updating the RSA server key pair prevents malicious hacking to the key pair and
enhances security of the SSH connections.
This command takes effect only on SSH1 clients.
The system starts to count down the configured minimum update interval after the first SSH1 user
logs in to the server. If a new SSH1 user logs in to the server after the interval, the system performs
the following operations:
1. Updates the RSA server key pair.
2. Uses the updated RSA server key pair for key pair negotiation with the new user.
3. Resets the interval and starts to count down the interval again.
This command is not available in FIPS mode.
Examples
# Set the minimum interval to 3 hours for updating the RSA server key pair.
<Sysname> system-view
[Sysname] ssh server rekey-interval 3
Related commands
display ssh server
ssh user
Use ssh user to create an SSH user and specify the service type and authentication method.
Use undo ssh user to delete an SSH user.
Syntax
In non-FIPS mode:
ssh user username service-type { all | netconf | scp | sftp | stelnet } authentication-type
{ password | { any | password-publickey | publickey } assign { pki-domain domain-name |
publickey keyname } }
undo ssh user username
In FIPS mode:
ssh user username service-type { all | netconf | scp | sftp | stelnet } authentication-type
{ password | password-publickey assign { pki-domain domain-name | publickey keyname } }
undo ssh user username
Default
No SSH users exist.
Views
System view
Predefined user roles
network-admin
Parameters
username: Specifies an SSH username, a case-sensitive string of 1 to 80 characters. If the login
username contains an ISP domain name, use the pureusername@domain, pureusername/domain,
or domain\pureusername format. Do not include hyphens (-) in the username of an SCP user.
Otherwise, SCP logins using that username will fail.
To Next Page
Loading...
Need help?
General
