336
Usage guidelines
This command is only available to SSH users that use SSH1 client software.
Updating the RSA server key periodically can prevent malicious hacking of the key and enhance
security of the SSH connections.
The system does not update any DSA key pair periodically.
Examples
# Set the RSA server key pair update interval to 3 hours.
<Sysname> system-view
[Sysname] ssh server rekey-interval 3
Related commands
display
ssh
server
ssh user
Use
ssh user
to create an SSH user and specify the service type and authentication method.
Use
undo ssh user
to delete an SSH user.
Syntax
ssh user
username
service-type stelnet
authentication-type
{
password
|
keyboard-interactive
| {
any
|
password-publickey
|
publickey
}
assign
{
pki-domain
pkiname
|
publickey
keyname
}}
ssh user
username
service-type
{
all
|
scp
|
sftp
}
authentication-type
{
password
|
keyboard-interactive
| {
any
|
password-publickey
|
publickey
}
assign
{
pki-domain
pkiname
|
publickey
keyname
}
work-directory
directory-name
}
undo ssh user
username
Views
System view
Default command level
3: Manage level
Parameters
username
: Specifies an SSH username, a case-sensitive string of 1 to 80 characters.
service-type
: Specifies the service type of an SSH user:
•
all
: Specifies Stelnet, SFTP, and SCP.
•
scp
: Specifies the service type as SCP.
•
sftp
: Specifies the service type as SFTP.
•
stelnet
: Specifies the service type of Stelnet.
authentication-type
: Specifies the authentication method of an SSH user:
•
password
: Specifies password authentication. This authentication method features easy and
fast encryption, but it is vulnerable. It can work with AAA to implement user authentication,
authorization, and accounting.
•
keyboard-interactive
: Specifies keyboard-interactive authentication. When the client initiates
an authentication request, the remote authentication server sends the SSH server an
authentication response with a question. The question is relayed to the client and displayed on
the client. The user must enter the answer to the question. This question-answer exchange
might be repeated multiple times until the user provides all required information. Then, the
remote authentication server returns an authentication success message. This authentication
