Generating/Destroying Key Pairs; Specifying A Service Type For An Ssh User - H3C S5600 SERIES Operation Manual

Table 1-4 Follow these steps to configure SSH management functions:
To do...
Enter system view
Set the SSH authentication
timeout time
Set the number of SSH
authentication retry attempts
Set the RSA server key
update interval
Configure a login header
Specify a source IP address
for the SSH server
Specify a source interface
for the SSH server
You can configure a login header only when the service type is stelnet. For configuration of service
types, refer to
For details of the header command, refer to the corresponding section in Login Command.
Configuring the SSH Server to Be Compatible with SSH1 Clients
Follow these steps to configure the SSH server to be compatible with SSH1 clients:
To do...
Enter system view
Configure the SSH server to be
compatible with SSH1 clients

Generating/Destroying Key Pairs

This configuration task lets you generate or destroy a key pair. You must generate an RSA and DSA key
pair on the server for an SSH client to log in successfully. When generating a key pair, you will be
Use the command...
system-view
ssh server timeout
seconds
ssh server
authentication-retries
times
ssh server rekey-interval
hours
header shell text
ssh-server source-ip
ip-address
ssh-server
source-interface
interface-type
interface-number
Specifying a Service Type for an SSH
Use the command...
system-view
ssh server
compatible-ssh1x
enable
—
Optional
By default, the SSH authentication
timeout time is 60 seconds.
Optional
By default, the number of SSH
authentication retry attempts is 3.
Optional
By default, the system does not update
the RSA server keys.
Optional
By default, no login header is
configured.
Optional
By default, the system determines the
IP address for clients to access.
Optional
By default, the system determines the
interface for clients to access.
User.
—
Optional
By default, the SSH server is
compatible with SSH1 clients.
1-7
Remarks
Remarks