Dell Force10 MXL Blade MXL 10/40GbE Switch IO Module Configuration Guide - Page 498

www.dell.com | support.dell.com • ip ssh authentication-retries: Configure the maximum number of attempts that should be used to authenticate a user. • ip ssh connection-rate-limit: Configure the maximum number of incoming SSH connections per minute. • ip ssh hostbased-authentication enable: Enable hostbased-authentication for the SSHv2 server. • ip ssh key-size: Configure the size of the server-generated RSA SSHv1 key. • ip ssh password-authentication enable: Enable password authentication for the SSH server. • ip ssh pub-key-file: Specify the file to be used for host-based authentication. • ip ssh rhostsfile: Specify the rhost file to be used for host-based authorization. • ip ssh rsa-authentication enable: Enable RSA authentication for the SSHv2 server. • ip ssh rsa-authentication: Add keys for the RSA authentication. • show crypto: Display the public part of the SSH host-keys. • show ip ssh client-pub-keys: Display the client public keys used in host-based authentication. • show ip ssh rsa-authentication: Display the authorized-keys for the RSA authentication. Secure Shell Authentication SSH is disabled by default. Enable it using the ip ssh server enable command. SSH supports three methods of authentication: • SSH Authentication by Password • RSA Authentication of SSH • Host-Based SSH Authentication Important Points to Remember for SSH Authentication • If you enable more than one method, the order in which the methods are preferred is based on the ssh_config file on the Unix machine. • When you enable all the three authentication methods, password authentication is the backup method when the RSA method fails. • The known_hosts and known_hosts2 files are generated when a user tries to SSH using version 1 or version 2, respectively. SSH Authentication by Password Authenticate an SSH client by prompting for a password when attempting to connect to the Dell Force10 system. This is the simplest methods of authentication and uses SSH version 1. To enable SSH password authentication, use the ip ssh password-authentication enable command from CONFIGURATION mode. To view your SSH configuration, use the show ip ssh command from EXEC Privilege mode (Figure 28-10). 496 | Security