Download Print this page

Ssh Server Authentication-Retries - HP FlexNetwork MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

Use undo ssh server acl to restore the default.
Syntax
ssh server acl { basic-acl-number | advanced-acl-number | mac mac-acl-number }
undo ssh server acl
Default
No ACLs are specified and all IPv4 SSH clients can initiate SSH connections to the server.
Views
System view
Predefined user roles
network-admin
Parameters
basic-acl-number: Specifies an IPv4 basic ACL number in the range of 2000 to 2999.
advanced-acl-number: Specifies an IPv4 advanced ACL number in the range of 3000 to 3999.
mac mac-acl-number: Specifies a Layer 2 ACL by its number in the range of 4000 to 4999.
Usage guidelines
The specified ACL filters IPv4 SSH clients' connection requests. Only the IPv4 SSH clients that the
ACL permits can initiate SSH connections to the server.
All IPv4 SSH clients can initiate SSH connections to the device when any one of the following
conditions exists:
You do not specify an ACL.
The specified ACL does not exist.
The specified ACL does not have rules.
The ACL takes effect only on SSH connections that are initiated after the ACL configuration.
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Configure ACL 2001 and permit only the users at 1.1.1.1 to initiate SSH connections to the server.
<Sysname> system-view
[Sysname] acl basic 2001
[Sysname-acl-ipv4-basic-2001] rule permit source 1.1.1.1 0
[Sysname-acl-ipv4-basic-2001] quit
[Sysname] ssh server acl 2001
Related commands
display ssh server

ssh server authentication-retries

Use ssh server authentication-retries to set the maximum number of authentication attempts for
SSH users.
Use undo ssh server authentication-retries to restore the default.
Syntax
ssh server authentication-retries retries
undo ssh server authentication-retries
605

Advertisement

loading