Optional) Authorizing Ssh Users Through The Command Line; Configuring The Service Type Of Ssh Users - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Basic Configuration
By default, the interval for updating the key pair of the SSH server is 0 that indicates no updating.
Step 3 Run:
ssh server timeout seconds
The timeout period of the SSH authentication is set.
By default, the timeout period is 60 seconds.
Step 4 Run:
ssh server authentication-retries times
The number of retry times of the SSH authentication is set.
By default, the retry times is 3.
----End
9.3.7 (Optional) Authorizing SSH Users Through the Command
Line
If RSA authentication is adopted, you need to configure command line authorization for SSH
users.
Context
Do as follows on the switch that serves as an SSH server:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ssh user user-name authorization-cmd aaa
The command line authorization is configured for the specified SSH user.
----End
Follow-up Procedure
After configuring the authorization through command lines for the SSH user to perform RSA
authentication, you have to configure the AAA authorization. Otherwise, the command line
authorization for the SSH user does not take effect.

9.3.8 Configuring the Service Type of SSH Users

You can set the service type of SSH users to SFTP, STelnet, or all.
Issue 01 (2011-07-15)
NOTE
There are four authentication modes for an SSH user, namely, password, rsa, password-rsa, and all. For
details of the configuration of the command line authorization for password authentication, refer to the
chapter "AAA and User Management" in the Quidway S2700 Series Configuration Guide - Security. This
section describes how to configure the command line authorization for RSA authentication.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Telnet and SSH
128