Optional) Configuring The Stelnet Server Parameters - Huawei netengine80e Configuration Manual

HUAWEI NetEngine80E/40E Router
Configuration Guide - Basic Configurations

6.4.6 (Optional) Configuring the STelnet Server Parameters

You can configure a device to be compatible with the SSH protocol of earlier versions, configure
or change the listening port number of an SSH server, and set an interval at which the key pair
of the SSH server is updated.
Context
Table 6-2
Table 6-2 Server parameters
Server
Parameter
Earlier SSH
version
compatibility
Listening port
number of an
SSH server
Interval at
which the key
pair of the
SSH server is
updated
Do as follows on the router that serves as an SSH server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Perform one or more operations shown in
Issue 02 (2011-09-10)
lists server parameters.
Description
SSH has two versions: SSH1.X (earlier than SSH2.0) and SSH2.0. Compared
with SSH1.X, SSH2.0 is extended in structure and supports more
authentication modes and key exchange methods. SSH2.0 also supports more
advanced services such as SFTP. The HUAWEI NetEngine80E/40E
supports SSH versions ranging from 1.3 to 2.0.
The default listening port number of an SSH server is 22. Users can log in to
the device by using the default listening port number. Attackers may access
the default listening port, consuming bandwidth, deteriorating server
performance, and causing authorized users unable to access the server. After
the listening port number of the SSH server is changed, attackers do not know
the new port number. This effectively prevents attackers from accessing the
listening port and improves security.
After the interval is set, the key pair of the SSH server is updated periodically
to improve security.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Table 6-3 as needed.
6 Managing File System
125