HP NonStop SSH 544701-014, Справочное руководство

Страница: 109 / 344

HP NonStop SSH Reference Manual Configuring and Running SSH2
•
109
Arguments
tcpip-process-name
Specifies the name of an existing TCP/IP process on your system.
Default
If omitted, the SSH2 process will be bound to "$ZTC0".
Example
SUBNET $ZTC03
Considerations
•
If you added a DEFINE =TCPIP^PROCESS^NAME to the TACL environment you use to start SSH2, this
setting will override the SUBNET parameter.
•
If you use parallel library TCPIP and want to share identical ports across multiple instances of SSH2, you need
to add an identical DEFINE to all instances sharing that port as in the following example:
ADD DEFINE =PTCPIP^FILTER^KEY, class map, file A1234
SUPPRESSCOMMENTINSSHVERSION
Use this parameter to suppress the 'comments' field in SSH protocol version exchanged between ssh server and ssh
client. The format of the ssh protocol version is defined in RFC 4253. The 'comments' field is defined as optional.
Parameter Syntax
SUPPRESSCOMMENTINSSHVERSION [ TRUE|FALSE ]
Arguments
[ TRUE|FALSE ]
Specifies whether comment part in the ssh protocol version is suppressed or not:
o
TRUE: Comment part will be suppressed.
o FALSE: Comment part will not be suppressed.
Default
If omitted, the SSH2 process will include the comment part as done in the previous release, i.e. default value is FALSE.
Considerations
•
RFC 4253 defines that client and server ssh protocol version string must be exchanged in clear text. This could
give away information about implementation details, which might be seen as a vulnerability. Using this
parameter only the optional part of the protocol version string can be suppressed.
•
On the other hand, the comments part may indicate specific capabilities of an implementation, i.e. can be
helpful information for the remote system.
TCPIPHOSTFILE
Use this parameter as an alternative to setting a DEFINE =TCPIP^HOST^FILE.
Parameter Syntax
TCPIPHOSTFILE filename
Arguments