1-7To do... Use the command... RemarksConfigure the authentication modeas schemeauthentication-mode scheme[ command-authorization ]RequiredBy default, the user interfaceauthentication mode is password.Specify the supported protocol(s) protocol inbound { all |ssh }OptionalBy default, both Telnet and SSHare supported.z If you have configured a user interface to support SSH protocol, you must configure AAAauthentication for the user interface by using the authentication-mode scheme command toensure successful login.z On a user interface, if the authentication-mode password or authentication-mode nonecommand has been executed, the protocol inbound ssh command is not available. Similarly, ifthe protocol inbound ssh command has been executed, the authentication-mode passwordand authentication-mode none commands are not available.Configuring the SSH Management FunctionsThe SSH server provides a number of management functions to prevent illegal operations such asmalicious password guess, guaranteeing the security of SSH connections. You can specify the IPaddress or the interface corresponding to the IP address for the SSH server to provide SSH accessservices for clients. In this way, the SSH client accesses the SSH server only using the specified IPaddress. This increases the service manageability when the SSH server has multiple interfaces and IPaddresses.Follow these steps to configure SSH management functions:To do... Use the command... RemarksEnter system view system-view —Set the SSH authentication timeouttime ssh server timeout secondsOptionalBy default, the SSH authenticationtimeout time is 60 seconds.Set the number of SSHauthentication retry attemptsssh serverauthentication-retries timesOptionalBy default, the number of SSHauthentication retry attempts is 3.Set the RSA server key updateinterval ssh server rekey-interval hoursOptionalBy default, the system does notupdate the RSA server keys.Configure a login header header shell textOptionalBy default, no login header isconfigured.Specify a source IP address for theSSH serverssh-server source-ipip-addressOptionalBy default, no source IP address isconfigured.
