3Com 5500-SI Switch User Manual


 
SSH Terminal Services 509
Defining SSH Authentication Retry Value
Setting SSH authentication retry value can effectively prevent malicious registration
attempt.
Perform the following configurations in System View.
Table 582 Defining SSH Authentication Retry Value
By default, the retry value is 3.
Entering Public Key Edit View and Editing Public Key
You can enter the public key edit view and edit the client public key.
This operation is only available for the SSH users using RSA authentication. At the
Switch, you configure the RSA public key of the client, while at the client, you specify
the RSA private key which corresponds to the RSA public key.
This operation will fail if you configure password authentication for the SSH user.
Perform the following configurations in System View.
Table 583 Configuring Public Key
When entering the public key edit view with the rsa peer-public-key command,
you can begin editing the public key with the
public-key-code begin command.
You can key in a blank space between characters, since the system can remove the
blank space automatically. But the public key should be composed of hexadecimal
characters. Terminate public key editing and save the result with the
public-key-code end command. Validity check comes before saving: the public key
editing fails if the key contains invalid characters.
Perform the following configurations in the Public Key View.
Figure 134 Starting/Terminating Public Key Editing
Associating Public Key with SSH User
Please perform the following configurations in System View.
Figure 135 Associating Public Key with SSH User
Operation Command
Define SSH authentication retry value ssh server authentication-retries times
Restore the default retry value undo ssh server authentication-retries
Operation Command
Enter public key view rsa peer-public-key key-name
Delete a designated public key undo rsa peer-public-key key-name
Operation Command
Enter public key edit view public-key-code begin
Terminate public key edit view public-key-code end
Quit public key view peer-public-key end
Operation Command
Associate existing public with an SSH
user
ssh user username assign rsa-key keyname
Remove the association undo ssh user username assign rsa-key