System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 147
3.10.2.1.12 SSH Commands
ssh
Syntax ssh
Context config>system>security
Description This command enables the context to configure the SSH server on the system. This
command should only be enabled or disabled when no SSH session is running.
When the command is executed, an SSH security key is generated. This key is valid until
either the node is restarted or the SSH server is stopped with the no ssh command and
restarted. The key size is non-configurable and set at 1024 bits.
Quitting SSH while in the process of authentication is accomplished by either executing a
ctrl-c or “~.” (tilde and dot), assuming the “~” is the default escape character for the SSH
session.
Default ssh — the SSH server is enabled
client-cipher-list
Syntax client-cipher-list protocol-version version
Context config>system>security>ssh
Description This command enables the context to configure the list of allowed ciphers on the SSH client
based on the SSH protocol version.
Default 2
Parameters version — the protocol version for the list of allowed ciphers on the SSH client
Values 1 — SSH protocol version 1 (not supported on a 7705 SAR node
running in FIPS-140-2 mode)
2 — SSH protocol version 2
cipher
Syntax cipher index name cipher-name
no cipher index
Context config>system>security>ssh>client-cipher-list
config>system>security>ssh>server-cipher-list
To Next Page
Loading...
