8-9z Enabling the SSH server to be compatible with SSH1 clientz Setting the server key pair update interval, applicable to users using SSH1 clientz Setting the SSH user authentication timeout periodz Setting the maximum number of SSH authentication attemptsSetting the above parameters can help avoid malicious guess at and cracking of the keys andusernames, securing your SSH connections.Follow these steps to set the SSH management parameters:To do… Use the command… RemarksEnter system view system-view —Enable the SSH server to workwith SSH1 clientsssh server compatible-ssh1xenableOptionalBy default, the SSH server canwork with SSH1 clients.Set the RSA server key pairupdate intervalssh server rekey-intervalhoursOptional0 by default, that is, the RSAserver key pair is not updated.Set the SSH userauthentication timeout periodssh serverauthentication-timeouttime-out-valueOptional60 seconds by defaultSet the maximum number ofSSH authentication attemptsssh serverauthentication-retries timesOptional3 by defaultAuthentication will fail if the number of authentication attempts (including both publickey and passwordauthentication) exceeds that specified in the ssh server authentication-retries command.Configuring the Device as an SSH ClientSSH Client Configuration Task ListComplete the following tasks to configure an SSH client:Task RemarksSpecifying a Source IP address/Interface for the SSH client OptionalConfiguring Whether First-time Authentication is Supported OptionalEstablishing a Connection Between the SSH Client and the Server RequiredSpecifying a Source IP address/Interface for the SSH clientThis configuration task allows you to specify a source IP address or interface for the client to accessthe SSH server, improving service manageability.
