Ssh Client Login To External Servers - Cisco ASR 5000 Series Administration Manual

SSH Client Login to External Servers

Step 3
Set the ClientAliveCountmax parameter to 2.
host_name
[local]
Step 4 Set the ClientAliveInterval parameter to 5 seconds.
host_name
[local]
Step 5 Exit the SSH Configuration mode.
host_name
[local]
host_name
[local]
SSH Client Login to External Servers
StarOS supports public key authentication for SSH/SFTP access from the StarOS gateway to external servers.
You configure this feature by generating SSH client key pairs and pushing the client public key to external
servers
By default StarOS only supports username-password authentication to external servers.
Note
Setting SSH Client Ciphers
The SSH Client Configuration mode ciphers CLI command configures the cipher priority list when logging
into an external server.
Step 1 Enter the SSH Client Configuration mode.
host_name
[local]
Step 2 Specify the desired encryption algorithms.
host_name
[local]
Notes:
• algorithms is a string of 1 through 511 alphanumeric characters that specifies the algorithm(s) to be used as a single
string of comma-separated variables (no spaces) in priority order (left to right) from those shown below:
• blowfish-cbc – symmetric-key block cipher, Cipher Block Chaining, (CBC)
• 3des-cbc – Triple Data Encryption Standard, CBC
• aes128-cbc – Advanced Encryption Standard (AES), 128-bit key size, CBC
• aes128-ctr – AES, 128-bit key size, Counter-mode encryption (CTR)
• aes192-ctr – AES, 192-bit key size, CTR
• aes256-ctr – AES, 256-bit key size, CTR
• aes128-gcm@openssh.com – AES, 128-bit key size, Galois Counter Mode [GCM], OpenSSH
ASR 5500 System Administration Guide, StarOS Release 21.4
36
client-alive-countmax 2
(config-sshd)#
client-alive-interval 5
(config-sshd)#
end
(config-sshd)#
#
client ssh
(config)#
ciphers algorithms
(config-ssh)#
Getting Started