HP FlexFabric 7900 Series Command Reference Manual page 194

undo ssh user username
In FIPS mode:
ssh user username service-type { all | scp | sftp | stelnet } authentication-type { password |
password-publickey assign publickey keyname }
undo ssh user username
Default
No SSH users exist.
Views
System view
Predefined user roles
network-admin
Parameters
username: Specifies an SSH username, a case-sensitive string of 1 to 80 characters. If the username
contains ISP domain name, the form is pureusername@domain. The pureusername argument is a string
of 1 to 55 characters. The domain argument is a string of 1 to 24 characters.
service-type: Specifies a service type for an SSH user:
all: Specifies Stelnet, SFTP, and SCP.
•
scp: Specifies the service type as SCP.
•
sftp: Specifies the service type as SFTP.
•
• stelnet: Specifies the service type as Stelnet.
authentication-type: Specifies an authentication method for an SSH user:
• password: Specifies password authentication. This authentication method features easy and fast
encryption, but it is vulnerable. It can work with AAA to implement user authentication,
authorization, and accounting.
any: Specifies either password authentication or publickey authentication.
•
password-publickey: Specifies both password authentication and publickey authentication
•
(featuring higher security) if the client runs SSH2, and specifies either type of authentication if the
client runs SSH1.
• publickey: Specifies publickey authentication. This authentication method has complicated and
slow encryption, but it provides strong authentication that can defend against brute-force attacks.
This authentication method is easy to use. If this method is configured, the authentication process
completes automatically without the need of entering any password.
assign publickey keyname: Assigns an existing host public key to an SSH user. The keyname argument
is a string of 1 to 64 characters.
Usage guidelines
If the authentication method is publickey, you must create an SSH user and a local user. To get the correct
working directory and user role, the local user must have the same username as the SSH user.
If the authentication method is password-publickey or any, you must create an SSH user, and configure
a local user account by using the local-user command for local authentication, or configure an SSH user
account on an authentication server, for example, a RADIUS server, for remote authentication.
187