AMX NXA-ENET24 Secure Shell Commands, Ip ssh timeout Syntax, Ip ssh authentication Syntax Retries

CLI (Command Line Interface)

Secure Shell Commands

Command	Function
ip ssh server	Syntax:
This command enables	[no] ip ssh server
the Secure Shell (SSH)	Default Setting: Disabled
server on this switch.	Command Mode: Global Configuration
Use the no form to disable	Command Usage:
this service.	• The SSH server supports up to four client sessions. The maximum number of
	client sessions includes both current Telnet sessions and SSH sessions.
	• The SSH server uses DSA or RSA for key exchange when the client first
	establishes a connection with the switch, and then negotiates with the client to
	select either DES (56-bit) or 3DES (168-bit) for data encryption.
	• You must generate the host key before enabling the SSH server.
	Example:
	Console#ip ssh crypto host-key generate dsa
	Console#configure
	Console(config)#ip ssh server
	Console(config)#
ip ssh timeout	Syntax:
This command configures	ip ssh timeout seconds
the timeout for the SSH	no ip ssh timeout
	• seconds – The timeout for client response during SSH negotiation.
server.
	Range: 1-120
Use the no form to restore
	Default Setting: 10 seconds
the default setting.
	Command Mode: Global Configuration
	Command Usage: The timeout specifies the interval the switch will wait for a
	response from the client during the SSH negotiation phase. Once an SSH session
	has been established, the timeout for user input is controlled by the exec-timeout
	command for vty sessions.
	Example:
	Console(config)#ip ssh timeout 60
	Console(config)#
ip ssh authentication-	Syntax:
retries	ip ssh authentication-retries count
This command configures	no ip ssh authentication-retries
	• count – The number of authentication attempts permitted after which the
the number of times the	interface is reset.
SSH server attempts to
	Range: 1-5
reauthenticate a user.
	Default Setting: 3
Use the no form to restore
the default setting.	Command Mode: Global Configuration
	Example:
	Console(config)#ip ssh authentication-retires 2
	Console(config)#
ip ssh server-key size	Syntax:
This command sets the	ip ssh server-key size key-size
SSH server key size.	no ip ssh server-key size
	• key-size – The size of server key.
Use the no form to restore
the default setting.	Range: 512-896 bits
	Default Setting: 768 bits
	Command Mode: Global Configuration
	Command Usage:
	• The server key is a private key that is never shared outside the switch.
	• The host key is shared with the SSH client, and is fixed at 1024 bits.
	Example:
	Console(config)#ip ssh server-key size 512
	Console(config)#

178 NXA-ENET24 - Software Management Guide