Setting The Ssh Management Parameters - HP 12500 Series Configuration Manual

Configuration procedure
To configure an SSH user and specify the service type and authentication method:
Step
1. Enter system view.
2. Create an SSH user, and
specify the service type and
authentication method.

Setting the SSH management parameters

Setting the SSH management parameters can improve the security of SSH connections.
The SSH management parameters include:
Whether the SSH server is compatible with SSH1 client.
•
RSA server key pair update interval, applicable to users using SSH1 clients.
•
SSH user authentication timeout period. You can set this parameter to reject a connection if the
•
authentication for the connection has not been finished before the timeout period expires.
Maximum number of SSH authentication attempts. You can set this parameter to prevent malicious
•
password cracking.
• SFTP connection idle timeout period. Once the idle period of an SFTP connection exceeds the
specified threshold, the system automatically tears the connection down.
To set the SSH management parameters:
Step
1. Enter system view.
2. Enable the SSH server to
support SSH1 clients.
3. Set the RSA server key pair
update interval.
4. Set the SSH user
authentication timeout period.
Command
system-view
•
Create an SSH user, and specify the service
type and authentication method for Stelnet
users:
ssh user username service-type stelnet
authentication-type { password | { any |
password-publickey | publickey } assign
publickey keyname }
•
Create an SSH user, and specify the service
type and authentication method for all
users, SCP or SFTP users:
ssh user username service-type { all | scp|
sftp } authentication-type { password |
{ any | password-publickey | publickey }
assign publickey keyname work-directory
directory-name }
Command
system-view
ssh server compatible-ssh1x
enable
ssh server rekey-interval hours
ssh server authentication-timeout
time-out-value
215
Remarks
N/A
Use either command.
The any and publickey
keywords are not
available in FIPS mode.
Remarks
N/A
Optional.
By default, the SSH server supports
SSH1 clients.
Optional.
0 by default. That is, the RSA server
key pair is not updated.
Optional.
60 seconds by default.