454
The system starts to count down the configured minimum update interval after the first SSH1 user
logs in to the server. If a new SSH1 user logs in to the server after the interval, the system performs
the following operations:
1.
Updates the RSA server key pair.
2.
Uses the updated RSA server key pair for key pair negotiation with the new user.
3.
Resets the interval and starts to count down the interval again.
This command takes effect only on SSH1 clients.
Examples
# Set the minimum interval to 3 hours for updating the RSA server key pair.
<Sysname> system-view
[Sysname] ssh server rekey-interval 3
Related commands
display ssh server
ssh user
Use
ssh user
to create an SSH user and specify the service type and authentication method.
Use
undo ssh user
to delete an SSH user.
Syntax
In non-FIPS mode:
ssh user username service-type
{
all
|
netconf
|
scp
|
sftp
|
stelnet
}
authentication-type
{
password
| {
any
|
password-publickey
|
publickey
} [
assign
{
pki-domain
domain-name
|
publickey
keyname
&<1-6> } ] }
undo ssh user
username
In FIPS mode:
ssh user username service-type
{
all
|
netconf
|
scp
|
sftp
|
stelnet
}
authentication-type
{
password
|
password-publickey
[
assign
{
pki-domain
domain-name
|
publickey
keyname
&<1-6> } ] }
undo ssh user
username
Default
No SSH users exist.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
username
: Specifies an SSH username, a case-sensitive string of 1 to 80 characters. If the login
username contains an ISP domain name, use the
pureusername
@
domain
,
pureusername
/
domain
,
or
domain
\
pureusername
format. Do not include hyphens (-) in the username of an SCP user.
Otherwise, SCP logins using that username will fail.
service-type
: Specifies a service type for the SSH user.
•
all
: Specifies service types Stelnet, SFTP, SCP, and NETCONF.
