Allied Telesis AlliedWare Plus 5.2.1, Руководство по программному обеспечению, Страница: 965 / 1294

Secure Shell (SSH) Introduction
©2008 Allied Telesis Inc. All rights reserved.
Software Version 5.2.1 AlliedWare Plus
TM
Operating System Software Reference C613-50003-00 REV E 43.5
The SSH server only allows only 10 unauthenticated SSH sessions at any point in time, by
default. You can modify the number of unauthenticated sessions it allows, by using the
max-startups parameter.
Once a client has authenticated, the SSH session does not time out, by default. Use the
session-timeout parameter to set a maximum time period the server waits before deciding
that a session is inactive and terminating it
For example, to set the session timeout to 600 seconds, the login timeout to 30 seconds, and
the maximum number of concurrent unauthenticated sessions to 5, use the command:
awplus(config)#
ssh server session-timeout 600 login-timeout 30
max-startups 5
To remove the configured session timeout, login timeout, or maximum startups, use the
command:
Validating the Server Configuration
To validate the SSH server configuration, use the command:
Adding SSH Users
The SSH server requires you to register SSH users. Users that are not registered cannot access
the SSH server. Ensure first that you have defined the user in the Authorized User Database of
your device. To add a new user, use the command:
To register a user with the SSH server, use the command:
Registered entries can contain just the username, or the username with some host details, such
as an IP address range. Additionally you can specify a range of users or hostname details by
using an asterisk to match any string of characters. For example, to allow any user from the IP
range 192.168.1.1 to 192.168.1.255, use the command:
To display the list of allowed users, use the command:
To delete an entry from the list of allowed users, use the command:
The SSH server also contains a list of denied users. The server checks all incoming sessions
against this list and denies any matching session, regardless of whether the session matches an
entry in the allowed users list. To add an entry to the list of denied users, use the command:
awplus(config)#
no ssh server session-timeout login-timeout
max-startups
awplus(config)#
show running-config ssh
awplus(config)#
username USERNAME (privilege 1-15) password PASSWORD
awplus(config)#
ssh server allow-users <username_pattern> [<hostname_pattern>]
awplus(config)#
ssh server allow-users * 192.168.1.*
awplus#
show ssh server allow-users
awplus(config)#
no ssh server allow-users <username_pattern> [<hostname_pattern>]
awplus(config)#
ssh server deny-users <username_pattern> [<hostname_pattern>]