Optional)Configuring The Basic Authentication Information For Ssh Users; Optional)Authorizing Ssh Users Through The Command Line - Huawei V300R005 Configuration Manual

9 Telnet and SSH
9.3.6 (Optional)Configuring the Basic Authentication Information
for SSH Users
Do as follows on the router:
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ssh server rekey-interval hours
The interval for updating the server key pair is configured.
Step 3 Run:
ssh server timeout seconds
The timeout period of the SSH authentication is set.
Step 4 Run:
ssh server authentication-retries times
The number of retry times of the SSH authentication is set.
----End
9.3.7 (Optional)Authorizing SSH Users Through the Command
Line
Do as follows on the router:
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ssh user user-name authorization-cmd aaa
The command line authorization is configured for the specified SSH client.
After the command line authorization is configured for the SSH client through the RSA
authentication, you must perform the AAA configuration; otherwise, the command line
authorization does not become valid for the SSH client.
----End
9-14
There are four authentication modes for an SSH user, namely, password, rsa, password-rsa, and all. For
the configuration of the command line authorization in password mode, refer to the chapter "AAA and
User Management" in the Quidway NetEngine80 Core Router Configuration Guide - Security. This
section describes how to configure the command line authorization in RSA mode.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway NetEngine80
Configuration Guide - Basic Configurations
Issue 04 (2009-12-20)