Table of Contents
Advertisement
84
C
4: C
HAPTER
ONFIGURING AND
M
IP I
ANAGING
NTERFACES AND
Login Timeouts
When you access the SSH server on a WX switch, MSS allows you 10
seconds to press Enter for the username prompt. After the username
prompt is displayed, MSS allows 30 seconds to enter a valid username
and password to complete the login. If you do not press Enter or
complete the login before the timer expires, MSS ends the session. These
timers are not configurable.
Session Timeouts
Each SSH session is governed by two timeouts:
Idle timeout — controls how long an open SSH session can remain
idle before MSS closes the session. The default idle timeout is 30
minutes. You can set the idle timeout to a value from 0 (disabled) to
2,147,483,647 minutes.
Absolute timeout — controls how long an SSH session can remain
open, regardless of how active the session is. The absolute timeout is
disabled by default. 3Com recommends using the idle timeout to
close unused sessions. However, if the idle timeout is disabled, MSS
changes the default absolute timeout from 0 (disabled) to 60 minutes
to prevent an abandoned session from remaining open indefinitely.
You can set the absolute timeout to a value from 0 (disabled) to
2,147,483,647 minutes.
To ensure that all CLI management sessions are encrypted, after you
configure SSH, disable Telnet.
Enabling SSH
SSH is enabled by default. However, to use SSH, you must generate an
SSH encryption key, using the following command:
crypto generate key ssh {1024 | 2048}
To disable or reenable SSH, use the following command:
set ip ssh server {enable | disable}
You must generate an SSH authentication key before you can enable
SSH. You need to generate the key only once. The key must be at least
1024 bytes long. The WX switch stores the key in nonvolatile storage
where the key remains even after software reboots.
S
ERVICES
Advertisement
Table of Contents
