3Com 3C13636 Configuration Manual page 217

3Com Router 3000 Ethernet Family
Configuration Guide
Note:
If password authentication is adopted, the user name specified in the ssh user
command must be consistent with the user name defined in AAA. If RSA authentication
is adopted, the value of this argument is a local SSH user name and needs not to be
defined in AAA.
If the default authentication mode for SSH users is password and local AAA
authentication is adopted, you are not necessarily use the ssh user command to
create an SSH user. Instead, you can use the local-user command to create a user
name and its password and then specify the service type for the user to SSH.
V. Setting an interval for updating the server key
To ensure security of the connections to the SSH server, update its key regularly.
Perform the following configuration in system view.
Table 11-19 Set an interval for updating the SSH server key
Set an interval for updating the SSH
server key
Restore the default update interval
By default, the server key is not updated.
VI. Setting the timeout time of SSH authentication
This configuration is used to set the time-out time of SSH authentication.
Perform the following configuration in system view.
Table 11-20 Set the timeout time of SSH authentication
Set the
authentication
Restore the default time-out time of SSH
authentication
By default, the time-out time is 60 seconds.
VII. Setting maximum number of SSH authentication retries
To prevent malicious behaviors such as malicious guess, limit the number of SSH
authentication retries.
Operation
Operation
timeout time of
3Com Corporation
11-20
Chapter 11 Terminal Services
Command
ssh server rekey-interval hours
undo ssh server rekey-interval
Command
SSH
ssh server timeout seconds
undo ssh server timeout