19-5
Ethernet Card Software Feature and Configuration Guide, R7.2
January 2009
Chapter 19 Configuring Security for the ML-Series Card
Displaying the SSH Configuration and Status
To return to the default SSH control parameters, use the no ip ssh {timeout | authentication-retries}
global configuration command.
Displaying the SSH Configuration and Status
To display the SSH server configuration and status, use one or more of the privileged EXEC commands
in Table 19-1.
Command Purpose
Step 1 Router # configure terminal Enter global configuration mode.
Step 2 Router (config)# ip ssh version [1
| 2]
(Optional) Configure the ML-Series card to run SSH Version 1 or SSH
Vers io n 2 .
1—Configure the ML-Series card to run SSH Version 1.
2—Configure the ML-Series card to run SSH Version 2.
If you do not enter this command or do not specify a keyword, the SSH
server selects the latest SSH version supported by the SSH client. For
example, if the SSH client supports SSHv1 and SSHv2, the SSH server
selects SSHv2.
Step 3 Router (config)# ip ssh timeout
seconds
Specify the timeout value in seconds; the default is 120 seconds . The
range is 0 to 120 seconds. This parameter applies to the SSH negotiation
phase. After the connection is established, the ML-Series card uses the
default timeout values of the CLI-based sessions.
By default, up to five simultaneous, encrypted SSH connections for
multiple CLI-based sessions over the network are available (session 0 to
session 4). After the execution shell starts, the CLI-based session timeout
value returns to the default of 10 minutes.
Step 4 Router (config)# ip ssh
authentication-retries number
Specify the number of times that a client can reauthenticate to the server.
The default is 3; the range is 0 to 5.
Step 5 Router (config)# end Return to privileged EXEC mode.
Step 6 Router # show ip ssh
or
Router # show ssh
Show the version and configuration information for your SSH server.
Show the status of the SSH server connections on the ML-Series card.
Step 7 Router # copy running-config
startup-config
(Optional) Save your entries in the configuration file.
Table 19-1 Commands for Displaying the SSH Server Configuration and Status
Command Purpose
show ip ssh Shows the version and configuration information for the SSH server.
show ssh Shows the status of the SSH server.