636
dscp
dscp-value
: Specifies the DSCP value in the IPv4 SSH packets. The value range for the
dscp-value
argument is 0 to 63, and the default value is 48. The DSCP value determines the
transmission priority of the packet.
escape
character
: Specifies a case-sensitive escape character. By default, the escape character is a
tilde (~).
public-key keyname
: Specifies the host public key of the server that the client uses to authenticate
the server. The
keyname
argument is a case-insensitive string of 1 to 64 characters.
source
: Specifies a source IPv4 address or source interface for SSH packets. By default, the device
uses the primary IPv4 address of the output interface in the routing entry as the source IPv4 address
of SSH packets. As a best practice to ensure successful IPv4 Stelnet connections, specify a
loopback interface or dialer interface as the source interface or specify that interface's IPv4 address
as the source IPv4 address.
interface interface-type interface-number
: Specifies a source interface by its type and number. The
primary IPv4 address of this interface is the source IPv4 address of the SSH packets.
ip
ip-address
: Specifies a source IPv4 address.
Usage guidelines
The combination of an escape character and a dot (.) works as an escape sequence. This escape
sequence is typically used to quickly terminate an SSH connection when the server reboots or
malfunctions.
For the escape sequence to take effect, you must enter it at the very beginning of a line. If you have
entered other characters or performed operations in a line, enter the escape sequence in the next
line.
As a best practice, use the default escape character (~). Do not use any character in SSH
usernames as the escape character.
Examples
# Establish a connection to the IPv4 Stelnet server
3.3.3.3
and specify the public key of the server as
svkey
. The Stelnet client uses publickey authentication. Specify the dollar sign ($) as the escape
character. Use the following algorithms:
•
Preferred key exchange algorithm:
dh-group14-sha1
.
•
Preferred server-to-client encryption algorithm:
aes128-cbc
.
•
Preferred client-to-server HMAC algorithm:
sha1
.
•
Preferred server-to-client HMAC algorithm:
sha1-96
.
•
Preferred compression algorithm:
zlib
.
<Sysname> ssh2 3.3.3.3 prefer-kex dh-group14-sha1 prefer-stoc-cipher aes128-cbc
prefer-ctos-hmac sha1 prefer-stoc-hmac sha1-96 prefer-compress zlib public-key svkey
escape $
ssh2 ipv6
Use
ssh2 ipv6
to establish a connection to an IPv6 Stelnet server.
Syntax
In non-FIPS mode:
ssh2
ipv6
server
[
port-number
] [
vpn-instance
vpn-instance-name
] [
-i
interface-type
interface-number
] [
identity-key
{
dsa
|
ecdsa
|
rsa
} |
prefer-compress
zlib
|
prefer-ctos-cipher
{
3des-cbc
|
aes128-cbc
| aes256-cbc
|
des-cbc
} |
prefer-ctos-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} |
prefer-kex
{
dh-group-exchange-sha1
|
dh-group1-sha1
|
dh-group14-sha1
} |
prefer-stoc-cipher
{
3des-cbc
|
aes128-cbc
| aes256-cbc
|
des-cbc
} |
prefer-stoc-hmac
{
md5
|
