C
OMMAND
L
INE
I
NTERFACE
3-50
• The SSH server uses RSA for key exchange when the client first
establishes a connection with the switch, and then negotiates with the
client to select either DES (56-bit) or 3DES (168-bit) for data
encryption.
Example
Related Commands
show ssh (3-52)
ip ssh
Use this command to configure authentication control parameters for the
Secure Shell (SSH) server on this switch. Use the no form to restore the
default settings.
Syntax
ip ssh {[timeout seconds] | [authentication-retries count]}
no ip ssh {[timeout] | [authentication-retries]}
• seconds – The timeout for client response during SSH negotiation.
(Range: 1-120)
• count – The number of authentication attempts permitted after which
the interface is reset. (Range: 1-5)
Default Setting
timeout: 120 seconds
retries: 3
Command Mode
Global Configuration
Command Usage
The timeout specifies the interval the switch will wait for a response
from the client during the SSH negotiation phase. Once an SSH session
has been established, the timeout for user input is controlled by the
exec-timeout command for vty sessions.
Console(config)#ip ssh server
Console(config)#