H3C S9500 Series Operation Manual page 919

Operation Manual – System Management
H3C S9500 Series Routing Switches
By default, no login authentication mode is specified, that is, SSH users are unable to
log in.
IV. Configuring the updating cycle of the server key
Use this configuration task to set the updating cycle of the server key to secure the SSH
connection in best effort.
Perform the following configuration in system view
Table 8-5 Configure the updating cycle of the server key
Configure the updating cycle of the server key
Cancel the updating cycle configuration
By default, the system does not update the server key.
V. Configuring the authentication timeout
Use this configuration task to set the authentication timeout of SSH connections.
Perform the following configuration in system view.
Table 8-6 Set the SSH authentication timeout
Set the SSH authentication timeout
Restore the default SSH authentication timeout
By default, the authentication timeout is 60 seconds.
VI. Configuring the number of authentication retries
Use this configuration task to set the number of authentication retries an SSH user can
request for a connection, thereby preventing illegal behaviors such as malicious
guessing.
Perform the following configuration in system view.
Operation
Operation
8-7
Chapter 8 SSH Terminal Service
Command
ssh server rekey-interval hours
undo ssh server rekey-interval
Command
ssh server timeout seconds
undo ssh server timeout