R21xx-HP FlexFabric 11900 Security Command Reference

124
Use undo ssh user to delete an SSH user.
Syntax
In non-FIPS mode:
ssh user username service-type { all | scp | sftp | stelnet } authentication-type { password | { any |
password-publickey | publickey } assign publickey keyname }
undo ssh user username
In FIPS mode:
ssh user username service-type { all | scp | sftp | stelnet } authentication-type { password |
password-publickey assign publickey keyname }
undo ssh user username
Default
No SSH users exist.
Views
System view
Predefined user roles
network-admin
Parameters
username: Specifies an SSH username, a case-sensitive string of 1 to 80 characters. If the username
contains ISP domain name, the form is pureusername@domain.
service-type: Specifies a service type for an SSH user:
• all: Specifies Stelnet, SFTP, and SCP.
• scp: Specifies the service type as SCP.
• sftp: Specifies the service type as SFTP.
• stelnet: Specifies the service type of Stelnet.
authentication-type: Specifies an authentication method for an SSH user:
• password: Specifies password authentication. This authentication method features easy and fast
encryption, but it is vulnerable. It can work with AAA to implement user authentication,
authorization, and accounting.
• any: Specifies either password authentication or publickey authentication.
• password-publickey: Specifies both password authentication and publickey authentication
(featuring higher security) if the client runs SSH2, and specifies either type of authentication if the
client runs SSH1.
• publickey: Specifies publickey authentication. This authentication method has complicated and
slow encryption, but it provides strong authentication that can defend against brute-force attacks.
This authentication method is easy to use. If this method is configured, the authentication process
completes automatically without the need of entering any password.
assign publickey keyname: Assigns an existing host public key to an SSH user. The keyname argument
is a string of 1 to 64 characters.