Configuration Guide Configuring SSH
You can specify the SSH version.
You can configure the SSH authentication timeout.
You can configure the maximum number of SSH authentication retries.
Notes
The precondition of configuring a device as the SSH server is that communication is smooth on the network that the
device resides, and the administrator can access the device management interface to configure related parameters.
The no crypto key generate command does not exist. You need to run the crypto key zeroize command to delete a
key.
The SSH module does not support hot standby. Therefore, for products that supports hot standby on the supervisor
modules, if no SSH key file exist on the new active module after failover, you must run the crypto key generate
command to re-generate a key before using SSH.
Configuration Steps
Enabling the SSH Server
Mandatory.
By default, the SSH server is disabled. In global configuration mode, enable the SSH server and generate an SSH key
so that the SSH server state changes to ENABLE.
Specifying the SSH Version
Optional.
By default, the SSH server supports SSHv1 and SSHv2, connecting either SSHv1 or SSHv2clients. If only SSHv1 or
SSHv2 is configured, only the SSH client of the configured version can be connected to the SSH server.
Configuring the SSH Authentication Timeout
Optional.
By default, the SSH authentication timeout is 120s. You can configure the user authentication timeout as required. The
value ranges from 1 to 120. The unit is second.
Configuring the Maximum Number of SSH Authentication Retries
Optional.
Configure the maximum number of SSH authentication retries to prevent illegal behaviors such as malicious guessing.
By default, the maximum number of SSH authentication retries is 3, that is, a user is allowed to enter the user name and
password three times for authentication. You can configure the maximum number of retries as required. The value
ranges from 0 to 5.
Enabling the Public Key Authentication for SSH Users
Optional.
To Next Page
Loading...
Need help?
General
