H3C Technologies H3C S12500-X Series Switches - Manual (Page 188)

176
• Maximum number of concurrent online SSH users. When the number of online SSH users reaches
the upper limit, the system refuses new SSH connection requests.
To set the SSH management parameters:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable the SSH server to
support SSH1 clients. ssh server compatible-ssh1x
enable
By default, the SSH server supports
SSH1 clients.
This command is not available in
FIPS mode.
3. Set the RSA server key pair
update interval.
ssh server rekey-interval hours
By default, the RSA server key pair
is not updated.
This command is not available in
FIPS mode.
4. Set the SSH user
authentication timeout period.
ssh server authentication-timeout
time-out-value
The default setting is 60 seconds.
5. Set the maximum number of
SSH authentication attempts.
ssh server authentication-retries
times
The default setting is 3.
6. Configure an ACL filtering for
IPv4 SSH clients.
ssh server acl acl-number
By default, all IPv4 SSH users are
allowed to initiate connections with
the SSH server.
7. Configure an ACL filtering for
IPv6 SSH clients.
ssh server ipv6 acl [ ipv6 ]
acl-number
By default, all IPv6 SSH users are
allowed to initiate connections with
the SSH server.
8. Set the DSCP value in the IPv4
packets that the SSH server
sends to the SSH clients. ssh server dscp dscp-value By default, the DSCP value is 48.
9. Set the DSCP value in the IPv6
packets that the SSH server
sends to the SSH clients.
ssh server ipv6 dscp dscp-value By default, the DSCP value is 48.
10. Configure the SFTP
connection idle timeout
period.
sftp server idle-timeout
time-out-value
The default setting is 10 minutes.
11. Specify the maximum number
of concurrent online SSH
users.
aaa session-limit ssh max-sessions
The default setting is 16.
Changing the upper limit does not
affect online SSH users.
118B
Configuring the device as an Stelnet client
271B
Stelnet client configuration task list
Tasks at a glance
(Optional.)
885H
Specifying a source IP address or source interface for the Stelnet client
(Required.)
886H
Establishing a connection to an Stelnet server