xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
64
S ECURE S HELL (SSH) C OMMANDS
The Secure Shell (SSH) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
Command config ssh algorithm show ssh algorithm config ssh authmode show ssh authmode config ssh user show ssh user authmode config ssh server enable ssh disable ssh show ssh server
Parameters
[3DES | AES128 | AES192 | AES256 | Arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1 | RSA | DSS] [enable | disable]
[password | publickey | hostbased] [enable | disable]
<username 15> authmode [hostbased [hostname <domain_name 32> | hostname_IP <domain_name 32> <ipaddr>] | password | publickey]
{maxsession <int 1-8>| contimeout <sec 120-600> | authfail {<int 2-20> | rekey
[10min | 30min | 60min | never] | port < tcp_port_number 1-65535>}
Each command is listed, in detail, in the following sections.
config ssh algorithm
Purpose
Syntax
Description
Parameters
Restrictions
Used to config ssh server algorithm. config ssh algorithm [3DES | AES128 | AES192 | AES256 | Arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1 | RSA | DSS] [enable | disable]
The config ssh algorithm command config the ssh service algorithm.
3DES - Specify ssh server encryption algorithm. blowfish - Specify ssh server encryption algorithm.
AES(128,192,256) - Specify ssh server encryption algorithm. arcfour - Specify ssh server encryption algorithm. cast128 - Specify ssh server encryption algorithm. twofish(128,192,256) - Specify ssh server encryption algorithm.
MD5 - Specify ssh server data integrality algorithm.
SHA1 - Specify ssh server data integrality algorithm.
DSS - Specify ssh server public key algorithm.
RSA - Specify ssh server public key algorithm. enable - Specify to enable the algorithm. disable - Specify to disable the alogirthm.
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable ssh server public key algorithm:
440
xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
DGS-3450:admin# config ssh algorithm DSS enable RSA enable
Command: config ssh algorithm DSS enable RSA enable
Success.
DGS-3450:admin#
show ssh algorithm
Purpose
Syntax
Description
Parameters
Restrictions
Used to show ssh server algorithm. show ssh algorithm
The show ssh algorithm command show the ssh service algorithm.
None.
None.
Example usage:
To show server algorithm:
DGS-3450:admin# show ssh algorithm
Command: show ssh algorithm
Encryption Algorithm
3DES : Enabled
AES128 : Enabled
AES192 : Enabled
AES256 : Enabled
Arcfour : Enabled
Blowfish : Enabled
Cast128 : Enabled
Twofish128 : Enabled
Twofish192 : Enabled
Twofish256 : Enabled
MD5 : Enabled
SHA1 : Enabled
RSA : Enabled
DSS : Enabled
DGS-3450:admin#
config ssh authmode
Purpose
Syntax
Description
Parameters
Restrictions
Used to update user authentication for ssh configuration. config ssh authmode [password | publickey | hostbased] [enable | disable]
The config ssh user command update the ssh user information. password - Specifies user authentication method. publickey - Specifies user authentication method. hostbased - Specifies user authentication method. enable - Enable user authentication method. disable - Disable user authentication method.
Only Administrator and Operator-level users can issue this command.
441
xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
Example usage:
To config user authentication method:
DGS-3450:admin# config ssh authmode publickey enable
Command: config ssh authmode publickey enable
Success.
DGS-3450:admin#
show ssh authmode
Purpose
Syntax
Description
Parameters
Restrictions
Used to show user authentication method. show ssh authmode
The show ssh authmode command show the user authentication method.
None.
None.
Example usage:
To show user authentication method:
DGS-3450:admin# show ssh authmode
Command: show ssh authmode
The SSH authmode
Password : Enabled
Publickey : Enabled
Hostbased : Enabled
DGS-3450:admin#
config ssh user
Purpose
Syntax
Description
Parameters
Used to update user information for ssh configuration. config ssh user <username 15> authmode [hostbased [hostname <domain_name 32> | hostname_IP <domain_name 32> <ipaddr>] | password | publickey]
The config ssh user command update the ssh user information. username - Specifies the User name. publickey - Specifies user authentication method. password - Specifies user authentication method. hostbased - Specifies user authentication method. hostname - Specifies host domain name. hostname_ip - Specifies host domain name and ipaddress. domain_name - Specifies host name if configuration hostbased mode. ipaddr - Specifies host ip address if configuring hostbased mode.
Only Administrator level users can issue this command. Restrictions
Example usage:
To update user “test” authmode:
442
xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
DGS-3450:admin# config ssh user test publickey
Command: config ssh user test publickey
Success.
DGS-3450:admin#
show ssh user authmode
Purpose
Syntax
Description
Parameters
Restrictions
Used to show ssh user information. show ssh user authmode
The show ssh user command show the ssh user information.
None.
Only Administrator level users can issue this command.
Example usage:
To show user information about ssh configuration:
DGS-3450:admin# show ssh user authmode
Command: show ssh user authmode
Current Accounts
Username Authenticaiton
------------- ------------- test publickey
Total Entries : 1
DGS-3450:admin#
config ssh server
Purpose
Syntax
Description
Parameters
Restrictions
Used to configure the SSH server. config ssh server {maxsession <int 1-8>| contimeout <sec 120-600> | authfail {<int 2-
20> | rekey [10min | 30min | 60min | never] | port < tcp_port_number 1-65535>}
The config ssh server command config the SSH server general information. maxsession - Specifies ssh server max session at the same time. contimeout - Specifies ssh server connection timeout. authfail - Specifies user max fail attempts.
10/30/60 min - Specifies time to re-generate session key. never - Do not re-generate session key. port - Specifies the TCP port used to communication between ssh client and server. The default value is 22.
Only Administrator and Operator-level users can issue this command.
Example usage:
To config ssh server maxsession is 3:
443
xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
DGS-3450:admin# config ssh server maxsession 3
Command: config ssh server maxsession 3
Success.
DGS-3450:admin#
enable ssh
Purpose
Syntax
Description
Parameters
Restrictions
Used to enable the SSH server. enable ssh
The enable ssh command enables ssh server services. When enabling ssh, telnet will be disabled.
None.
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable the SSH server:
DGS-3450:admin# enable ssh
Command: enable ssh
Success.
DGS-3450:admin#
disable ssh
Purpose
Syntax
Description
Parameters
Restrictions
Used to disable the SSH server service. disable ssh
The disable ssh command disables ssh server services.
None.
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable the SSH server service:
DGS-3450:admin# disable ssh
Command: disable ssh
Success.
DGS-3450:admin#
show ssh server
Purpose
Syntax
Description
Used to show the SSH server. show ssh server
The show ssh server command show the ssh server general information.
444
xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
show ssh server
Parameters
Restrictions
None.
None.
Example usage:
To show the SSH server:
DGS-3450:admin# show ssh server
Command: show ssh server
The SSH server configuration max Session : 3
Connection timeout : 300
Authfail attempts : 2
Rekey timeout : 60min
TCP Port Number : 23
DGS-3450:admin#
445
