Setting The Ssh Management Parameters; Configuring The Device As An Ssh Client; Ssh Client Configuration Task List - H3C S5810 Series Operation Manual

You can configure the accounting information either on the device or on the remote authentication
server (such as RADIUS authentication server).
After login, the commands available to a user are determined by AAA authorization.

Setting the SSH Management Parameters

SSH management includes:
Enabling the SSH server to be compatible with SSH1 client
Setting the server key pair update interval, applicable to users using SSH1 client
Setting the SSH user authentication timeout period
Setting the maximum number of SSH authentication attempts
Setting the above parameters can help avoid malicious guess at and cracking of the keys and
usernames, securing your SSH connections.
Follow these steps to set the SSH management parameters:
To do...
Enter system view
Enable the SSH server to
support SSH1 clients
Set the RSA server key pair
update interval
Set the SSH user
authentication timeout period
Set the maximum number of
SSH authentication attempts
Authentication will fail if the number of authentication attempts (including both publickey and password
authentication) exceeds that specified in the ssh server authentication-retries command.

Configuring the Device as an SSH Client

SSH Client Configuration Task List

Complete the following tasks to configure an SSH client:
Specifying a Source IP address/Interface for the
SSH client
Use the command...
system-view
ssh server compatible-ssh1x
enable
ssh server rekey-interval
hours
ssh server
authentication-timeout
time-out-value
ssh server
authentication-retries times
Task
2-9
—
Optional
By default, the SSH server
supports SSH1 clients.
Optional
0 by default, that is, the RSA
server key pair is not updated.
Optional
60 seconds by default
Optional
3 by default
Remarks
Optional
Remarks