H3C SOHO IE4300, Command Reference Manual

Page: 2445 / 3296

61
Predefined user roles
network-admin
Parameters
server
: Specifies a server by its IPv6 address or host name, a case-insensitive string of 1 to 253
characters.
port-number
: Specifies the port number of the server, in the range 1 to 65535. The default is 22.
vpn-instance vpn-instance-name
: Specifies the MPLS L3VPN instance to which the server
belongs. The
vpn-instance-name
argument represents the VPN instance name, a
case-sensitive string of 1 to 31 characters.
-i interface-type interface-number:
Specifies an output interface by its type and
number for IPv6 SSH packets. Specify this option when the server uses a link-local address to
provide the Stelnet service for the client. The specified output interface on the Stelnet client must
have a link-local address.
suite-b
: Specifies the Suite B algorithms. If neither the 128-bit keyword nor the 192-bit keyword is
specified, all algorithms in Suite B are used. For more information about the Suite B algorithms, see
Table 9 .
128-bit : Specifies the 128-bit Suite B security level.
192-bit
: Specifies the 192-bit Suite B security level.
pki-domain domain-name
: Specifies the PKI domain of the client's certificate. The
domain-name
argument represents the PKI domain name, a case-insensitive string of 1 to 31
characters. Invalid characters are tildes (~), asterisks (*), backslashes (\), vertical bars (|), colons (:),
dots (.), angle brackets (< >), quotation marks ("), and apostrophes (').
server-pki-domain domain-name
: Specifies the PKI domain for verifying the server's
certificate. The
domain-name
argument represents the PKI domain name, a case-insensitive string
of 1 to 31 characters. Invalid characters are tildes (~), asterisks (*), backslashes (\), vertical bars (|),
colons (:), dots (.), angle brackets (< >), quotation marks ("), and apostrophes ('). If you do not specify
the server's PKI domain, the client uses the PKI domain of its own certificate to verify the server's
certificate.
prefer-compress
: Specifies the preferred compression algorithm for data compression between
the server and the client. By default, compression is not supported.
zlib
: Specifies compression algorithm zlib.
dscp dscp-value : Specifies the DSCP value in the IPv6 SSH packets. The value range for the
dscp-value
argument is 0 to 63, and the default value is 48. The DSCP value determines the
transmission priority of the packet.
escape character : Specifies a case-sensitive escape character. By default, the escape
character is a tilde (~).
source : Specifies a source IP address or source interface for IPv6 SSH packets. By default, the
device automatically selects a source address for IPv6 SSH packets in compliance with RFC 3484.
As a best practice to ensure successful Stelnet connections, specify a loopback interface as the
source interface or specify the IPv6 address of a loopback interface as the source address.
•
interface interface-type interface-number
: Specifies a source interface by its
type and number. The IPv6 address of this interface is the source IP address of the IPv6 SSH
packets.
•
ipv6 ipv6-address : Specifies a source IPv6 address.