Setting The Ssh Management Parameters - HP 10500 Series Configuration Manual

SSH1 does not support SFTP or SCP. For an SSH1 client, you must set the service type to stelnet or
•
all.
For an SFTP SSH user, the working folder depends on the authentication method:
•
If only password authentication is used, the working folder is authorized by AAA.
If publickey authentication, whether with password authentication or not, is used, the working
folder is set by using the ssh user command.
• If you change the authentication mode or public key for an SSH user that has been logged in, the
change can take effect only at the next login of the user.
Configuration procedure
To configure an SSH user and specify the service type and authentication method:
Step
1. Enter system view.
2. Create an SSH user, and
specify the service type
and authentication
method.

Setting the SSH management parameters

SSH management parameters can be configured to improve the security of SSH connections. SSH
management parameters include:
Compatibility between the SSH server and SSH1 clients.
•
• RSA server key pair update interval, applicable to users using SSH1 client.
SSH user authentication timeout period. This parameter is used to reject a connection if the
•
authentication for the connection is not completed before the timeout period expires.
Command
system-view
•
Create an SSH user, and specify the service type
and authentication method for Stelnet users:
In non-FIPS mode:
ssh user username service-type stelnet
authentication-type { password | { any |
password-publickey | publickey } assign
publickey keyname }
In FIPS mode:
ssh user username service-type stelnet
authentication-type { password |
password-publickey assign publickey
keyname }
•
Create an SSH user, and specify the service type
and authentication method for all users or SFTP
users:
In non-FIPS mode:
ssh user username service-type { all | scp |
sftp } authentication-type { password | { any |
password-publickey | publickey } assign
publickey keyname work-directory
directory-name }
In FIPS mode:
ssh user username service-type { all | scp |
sftp } authentication-type { password |
password-publickey assign publickey
keyname work-directory directory-name }
207
Remarks
N/A
Use one of the
commands.