Ssh User - HPE FlexNetwork HSR6800 Security Command Reference

Usage guidelines
This command is only available to SSH users that use SSH1 client software.
Updating the RSA server key periodically can prevent malicious hacking of the key and enhance
security of the SSH connections.
The system does not update any DSA key pair periodically.
Examples
# Set the RSA server key pair update interval to 3 hours.
<Sysname> system-view
[Sysname] ssh server rekey-interval 3
Related commands
display ssh server

ssh user

Use ssh user to create an SSH user and specify the service type and authentication method.
Use undo ssh user to delete an SSH user.
Syntax
ssh user username service-type stelnet authentication-type { password | keyboard-interactive
| { any | password-publickey | publickey } assign { pki-domain pkiname | publickey keyname }}
ssh user username service-type { all | scp | sftp } authentication-type { password |
keyboard-interactive | { any | password-publickey | publickey } assign { pki-domain pkiname |
publickey keyname } work-directory directory-name }
undo ssh user username
Views
System view
Default command level
3: Manage level
Parameters
username: Specifies an SSH username, a case-sensitive string of 1 to 80 characters.
service-type: Specifies the service type of an SSH user:
•
all: Specifies Stelnet, SFTP, and SCP.
•
scp: Specifies the service type as SCP.
•
sftp: Specifies the service type as SFTP.
•
stelnet: Specifies the service type of Stelnet.
authentication-type: Specifies the authentication method of an SSH user:
•
password: Specifies password authentication. This authentication method features easy and
fast encryption, but it is vulnerable. It can work with AAA to implement user authentication,
authorization, and accounting.
•
keyboard-interactive: Specifies keyboard-interactive authentication. When the client initiates
an authentication request, the remote authentication server sends the SSH server an
authentication response with a question. The question is relayed to the client and displayed on
the client. The user must enter the answer to the question. This question-answer exchange
might be repeated multiple times until the user provides all required information. Then, the
remote authentication server returns an authentication success message. This authentication
336