Dell PowerConnect B-RX Configuration Manual page 946

28
Configuring SSH
Note that if you change the default SSH port number, you must configure SSH clients to connect to
the new port. Also, you should be careful not to assign SSH to a port that is used by another
service. If you change the SSH port number, Brocade recommends that you change it to a port
number greater than 1024.
Syntax: ip ssh port <number>
Setting the SSH login timeout value
When the SSH server attempts to negotiate a session key and encryption method with a connecting
client, it waits a maximum of 120 seconds for a response from the client. If there is no response
from the client after 120 seconds, the SSH server disconnects. You can change this timeout value
to between 1 – 120 seconds. For example, to change the timeout value to 60 seconds.
BigIron RX(config)# ip ssh timeout 60
Syntax: ip ssh timeout <seconds>
Designating an interface as the source for all SSH packets
You can designate a loopback interface, virtual interface, or Ethernet port as the source for all SSH
packets from the device. The software uses the IP address with the numerically lowest value
configured on the port or interface as the source IP address for SSH packets originated by the
device.
NOTE
When you specify a single SSH source, you can use only that source address to establish SSH
management sessions with the BigIron RX.
To specify the numerically lowest IP address configured on a loopback interface as the device's
source for all SSH packets, enter commands such as a the following.
BigIron RX(config)# int loopback 2
BigIron RX(config-lbif-2)# ip address 10.0.0.2/24
BigIron RX(config-lbif-2)# exit
BigIron RX(config)# ip ssh source-interface loopback 2
The commands in this example configure loopback interface 2, assign IP address 10.0.0.2/24 to
the interface, then designate the interface as the source for all SSH packets from the device.
Syntax: ip ssh source-interface ethernet <slot/port> | loopback <num> | ve <num>
The <num> parameter is a loopback interface or virtual interface number. The <slot/port>
parameter specifies an ethernet port number. For example.
BigIron RX(config)# interface ethernet 1/4
BigIron RX(config-if-e10000-1/4)# ip address 209.157.22.110/24
BigIron RX(config-if-e10000-1/4)# exit
BigIron RX(config)# ip ssh source-interface ethernet 1/4
Configuring maximum idle time for SSH sessions
By default, SSH sessions do not time out. Optionally, you can set the amount of time an SSH
session can be inactive before the device closes it. For example, to set the maximum idle time for
SSH sessions to 30 minutes.
BigIron RX(config)# ip ssh idle-time 30
874 BigIron RX Series Configuration Guide
53-1001810-01