H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 309)

295
Setting these parameters can help avoid malicious guessing at and cracking of the keys and usernames,
securing your SSH connections.
To set the SSH management parameters:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable the SSH server to
support SSH1 clients. ssh server compatible-ssh1x
enable
Optional.
By default, the SSH server supports
SSH1 clients.
3. Set the RSA server key pair
update interval.
ssh server rekey-interval hours
Optional.
By default, the interval is 0, and the
RSA server key pair is not updated.
4. Set the SSH user
authentication timeout period.
ssh server authentication-timeout
time-out-value Optional.
60 seconds by default.
5. Set the maximum number of
SSH authentication attempts. ssh server authentication-retries
times
Optional.
3 by default.
Authentication will fail if the
number of authentication attempts
(including both publickey and
password authentication) exceeds
that specified in the ssh server
authentication-retries command.
Configuring the access controller as an SSH client
SSH client configuration task list
Task Remarks
Specifying a source ip address/interface for the SSH client Optional
Configuring whether first-time authentication is supported Optional
Establishing a connection between the SSH client and server Required
Specifying a source ip address/interface for the SSH client
This configuration task allows you to specify a source IP address or interface for the client to access the
SSH server, improving service manageability.
To specify a source IP address or interface for the client:
Step Command Remarks
1. Enter system view. system-view N/A