Configuring the Device as an SSH Client 1115■ After login, the commands available for a user are determined by the userprivilege level, which is configured with the user privilege level command onthe user interface. By default, the command privilege level is 0.For users using password authentication:■ You can configure the accounting information either on the device or on theremote authentication server (such as RADIUS authentication server).■ After login, the commands available to a user are determined by AAAauthorization.Setting the SSHManagementParametersSSH management includes:■ Enabling the SSH server to be compatible with SSH1■ Setting the server key pair update interval, applicable to users using SSH1client.■ Setting the SSH user authentication timeout period■ Setting the maximum number of SSH authentication attemptsSetting the above parameters can help avoid malicious guess at and cracking ofthe keys and usernames, securing your SSH connections.Follow these steps to set the SSH management parameters:n Authentication will fail if the number of authentication attempts (including bothpublickey and password authentication) exceeds that specified in the ssh serverauthentication-retries command.Configuring theDevice as an SSHClientSSH Client ConfigurationTask ListComplete the following tasks to configure an SSH client:To do… Use the command… RemarksEnter system view system-view -Enable the SSH server to workwith SSH1.x clientsssh servercompatible-ssh1x enableOptionalBy default, the SSH server canwork with SSH1.x clients.Set the RSA server key pairupdate intervalssh server rekey-intervalhoursOptional0 by default, that is, the RSAserver key pair is not updated.Set the SSH userauthentication timeout periodssh serverauthentication-timeouttime-out-valueOptional60 seconds by defaultSet the maximum number ofSSH authentication attemptsssh serverauthentication-retries timesOptional3 by default
