Setting The Dscp Value For Packets Sent By The Ssh Server; Configuring The Device As An Stelnet Client - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Maximum number of SSH authentication attempts. This parameter is used to prevent malicious
password cracking.
SFTP connection idle timeout period. Once the idle period of an SFTP connection exceeds the
specified threshold, the system automatically tears the connection down.
To set the SSH management parameters:
Step
1.
Enter system view.
2.
Enable the SSH server to
support SSH1 clients.
3.
Set the RSA server key pair
update interval.
4.
Set the SSH user
authentication timeout period.
5.
Set the maximum number of
SSH authentication attempts.
6.
Configure the SFTP
connection idle timeout
period.
NOTE:
Authentication fails if the number of authentication attempts (including both publickey and password
authentication) exceeds that specified by the ssh server authentication-retries command.

Setting the DSCP value for packets sent by the SSH server

Step
1.
Enter system view.
2.
Set
the
packets sent by the SSH
server.
NOTE:
This feature is available in Release 1203 and later versions.

Configuring the device as an Stelnet client

This section describes how to configure the device as an Stelnet client.
Command
system-view
ssh server compatible-ssh1x
enable
ssh server rekey-interval hours
ssh server authentication-timeout
time-out-value
ssh server authentication-retries
times
sftp server idle-timeout
time-out-value
Command
system-view
DSCP
value
for
Set the DSCP value for IPv4
packets sent by the SSH server:
ssh server dscp dscp-value
Set the DSCP value for IPv6
packets sent by the SSH server:
ssh server ipv6 dscp dscp-value
208
Remarks
N/A
Optional.
By default, the SSH server supports
SSH1 clients.
Optional.
By default, the interval is 0, and the
RSA server key pair is not updated.
Optional.
60 seconds by default.
Optional.
3 by default.
Optional.
10 minutes by default.
Remarks
N/A
Optional.
By default, the DSCP value is 16 in
IPv4 packets sent by the SSH server
and is 0 in IPv6 packets sent by the
SSH server.

Advertisement

Table of Contents
loading

Table of Contents