3Com MSR 50 Series Configuration Manual page 1927

■
■
n
For users using publickey authentication
■
■
For users using password authentication
■
■
Setting the SSH SSH management includes:
Management
■
Parameters
■
■
■
Setting the above parameters can help avoid malicious guess at and cracking of
the keys and usernames, securing your SSH connections.
Follow these steps to set the SSH management parameters:
To do...
Enter system view
Enable the SSH server to work
with SSH1.x clients
Set the RSA server key pair
update interval
Set the SSH user
authentication timeout period
Set the maximum number of
SSH authentication attempts
The working folder of an SFTP user is subject to the user authentication
method. For a user using only password authentication, the working folder is
the AAA authorized one. For a user using only publickey authentication or
using both the publickey and password authentication methods, the working
folder is the one set by using the ssh user command.
The configured authentication method takes effect when the user logs in at
the next time.
You must configure on the device (switch or router) the corresponding
username and public keys.
After login, the commands available to a user are determined by the user
privilege level that is configured with the user privilege level command on
the user interface. By default, the command privilege level is 0.
You can configure the accounting information either on the device (switch or
router) or on the remote authentication server (such as RADIUS authentication
server).
After login, the commands available to a user are determined by AAA
authorization.
Enabling the SSH server to be compatible with SSH1
Setting the server key pair update interval applicable to users using SSH1 client
Setting the SSH user authentication timeout period
Setting the maximum number of SSH authentication attempts
Configuring the Device as an SSH Server
Use the command...
system-view
ssh server
compatible-ssh1x enable
ssh server rekey-interval
hours
ssh server
authentication-timeout
time-out-value
ssh server
authentication-retries times
1927
Remarks
-
Optional
By default, the SSH server can
work with SSH1.x clients.
Optional
0 by default, that is, the server
key pair is not updated.
Optional
60 seconds by default
Optional
3 by default