Configuring The Ssh Management Functions - 3Com 4200G 12-Port Configuration Manual

To do...
Configure the authentication
mode as scheme
Specify the
protocol(s)
If you have configured a user interface to support SSH protocol, you must configure AAA
authentication for the user interface by using the authentication-mode scheme command to
ensure successful login.
On a user interface, if the authentication-mode password or authentication-mode none
command has been executed, the protocol inbound ssh command is not available. Similarly, if
the protocol inbound ssh command has been executed, the authentication-mode password
and authentication-mode none commands are not available.

Configuring the SSH Management Functions

The SSH server provides a number of management functions to prevent illegal operations such as
malicious password guess, guaranteeing the security of SSH connections. You can specify the IP
address or the interface corresponding to the IP address for the SSH server to provide SSH access
services for clients. In this way, the SSH client accesses the SSH server only using the specified IP
address. This increases the service manageability when the SSH server has multiple interfaces and IP
addresses.
Follow these steps to configure SSH management functions:
To do...
Enter system view
Set the SSH authentication
timeout time
Set the number of SSH
authentication retry attempts
Set the RSA server key update
interval
Configure a login header
Use the command...
authentication-mode scheme
[ command-authorization ]
supported
protocol inbound { all |ssh }
Use the command...
system-view
ssh server timeout seconds
ssh server
authentication-retries times
ssh server rekey-interval
hours
header shell text
Required
By default, the user interface
authentication
password.
Optional
By default, both Telnet and
SSH are supported.
—
Optional
By default, the SSH
authentication timeout time is 60
seconds.
Optional
By default, the number of SSH
authentication retry attempts is 3.
Optional
By default, the system does not
update the RSA server keys.
Optional
By default, no login header is
configured.
1-7
Remarks
mode is
Remarks