6-17
Configuring Secure Shell (SSH)
Configuring the Switch for SSH Operation
The ip ssh key-size command affects only a per-session, internal server key the
switch creates, uses, and discards. This key is not accessible from the user
interface. The switch’s public (host) key is a separate, accessible key that is
always 896 bits.
Note on Port
Number
ProCurve recommends using the default TCP port number (22). However, you
can use ip ssh port to specify any TCP port for SSH connections except those
reserved for other purposes. Examples of reserved IP ports are 23 (Telnet)
and 80 (http). Some other reserved TCP ports on the ProCurve switches are
49, 80, 1506, and 1513.
Figure 6-11. Example of Enabling IP SSH and Listing the SSH Configuration and Status
[port < 1-65535 | default >]
The TCP port number for SSH connections (default:
22). Important: See “Note on Port Number” on page
6-17.
[timeout < 5 - 120 >]
The SSH login timeout value (default: 120 seconds).
[version <1 | 2 | 1-or-2 >
The version of SSH to accept connections from.
(default: 1-or-2)
The switch uses these five settings internally for
transactions with clients. See the Caution on page
6-18.
Enables SSH on the switch.
Lists the current SSH
configuration and status.
With SSH running, the switch allows one
console session and up to three other sessions
(SSH and/or Telnet). Web browser sessions are
also allowed, but do not appear in the show ip ssh