H3C SOHO IE4300, Command Reference Manual

Page: 2397 / 3296

13
Syntax
ssh server key-re-exchange enable [ interval interval ]
undo ssh server key-re-exchange enable
Default
SSH algorithm renegotiation and key re-exchange are disabled.
Views
System view
Predefined user roles
network-admin
Parameters
interval interval
: Specifies an interval for SSH algorithm renegotiation and key re-exchange,
in the range of 1 to 24 hours. If you do not specify this option, the SSH server initiates SSH algorithm
renegotiation and key re-exchange at intervals of 1 hour.
Usage guidelines
This command is not available in FIPS mode.
This command enables the SSH server to renegotiate algorithms and re-exchange keys at regular
intervals after the first algorithm negotiation and key exchange with SSH clients.
This command takes effect only on new SSH connections that are established after the command is
configured, and it does not affect existing SSH connections.
Examples
# Enable SSH algorithm renegotiation and key re-exchange.
<Sysname> sysname
[Sysname] ssh server key-re-exchange enable
ssh server pki-domain
Use
ssh server pki-domain
to specify a PKI domain for an SSH server.
Use
undo ssh server pki-domain
to restore the default.
Syntax
ssh server pki-domain domain-name
undo ssh server pki-domain
Default
No PKI domain is specified for an SSH server.
Views
System view
Predefined user roles
network-admin
Parameters
domain-name
: Specifies the name of the PKI domain used to verify the SSH server. The PKI
domain name is a case-insensitive string of 1 to 31 characters. Invalid characters are tildes (~),
asterisks (*), backslashes (\), vertical bars (|), colons (:), dots (.), angle brackets (< >), quotation
marks ("), and apostrophes (').