H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – SSH
H3C S7500E Series Ethernet Switches Chapter 1 SSH Configuration
1-11
z Setting the SSH user authentication timeout period
z Setting the maximum number of SSH authentication attempts
Setting the above parameters can help avoid malicious guess at and cracking of the
keys and usernames, securing your SSH connections.
Follow these steps to set the SSH management parameters:
To do… Use the command… Remarks
Enter system view
system-view
—
Enable the SSH server to
work with SSH1.x clients
ssh server
compatible-ssh1x
enable
Optional
By default, the SSH
server can work with
SSH1.x clients.
Set the RSA server key
pair update interval
ssh server
rekey-interval hours
Optional
0 by default, that is, the
RSA server key pair is not
updated.
Set the SSH user
authentication timeout
period
ssh server
authentication-timeout
time-out-value
Optional
60 seconds by default
Set the maximum number
of SSH authentication
attempts
ssh server
authentication-retries
times
Optional
3 by default
 Note:
Authentication will fail if the number of authentication attempts (including both
publickey and password authentication) exceeds that specified in the ssh server
authentication-retries command.
1.3 Configuring the Device as an SSH Client
1.3.1 SSH Client Configuration Task List
Complete the following tasks to configure an SSH client:
Task Remarks
Specifying a Source IP address/Interface for SSH Client Optional
Configuring First-time Authentication Optional
Establishing a Connection Between SSH Client and Server Required