Brocade BigIron RX Series Configuration Guide - Manual (Page 1076)

998 BigIron RX Series Configuration Guide
53-1002484-04
Configuring SSH
31
Syntax: show ip client-pub-key [| begin<expression> | exclude <expression> | include
<expression>]
To clear the public keys from the buffers, enter the following command.
BigIron RX# clear public-key
Syntax: clear public-key
Use the ip ssh pub-key remove command to delete the public key from the system.
Enabling DSA challenge-response authentication
DSA challenge-response authentication is enabled by default. You can disable or re-enable it
manually.
To enable DSA challenge-response authentication.
BigIron RX(config)# ip ssh key-authentication yes
To disable DSA challenge-response authentication.
BigIron RX(config)# ip ssh key-authentication no
Syntax: ip ssh key-authentication yes | no
Setting the number of SSH authentication retries
By default, the device attempts to negotiate a connection with the connecting host three times. The
number of authentication retries can be changed to between 1 – 5.
For example, the following command changes the number of authentication retries to 5.
BigIron RX(config)# ip ssh authentication-retries 5
Syntax: ip ssh authentication-retries <number>
Deactivating user authentication
After the SSH server on the device negotiates a session key and encryption method with the
connecting client, user authentication takes place. Brocade’s implementation of SSH supports DSA
challenge-response authentication and password authentication.
BigIron RX# show ip client-pub-key
---- BEGIN SSH2 PUBLIC KEY ----
Comment: DSA Public Key
AAAAB3NzaC1kc3MAAACBAPY8ZOHY2yFSJA6XYC9HRwNHxaehvx5wOJ0rzZdzoSOXxbET
W6ToHv8D1UJ/
z+zHo9Fiko5XybZnDIaBDHtblQ+Yp7StxyltHnXF1YLfKD1G4T6JYrdH YI14Om
1eg9e4NnCRleaqoZPF3UGfZia6bXrGTQf3gJq2e7Yisk/gF+1VAAAAFQDb8D5cv
wHWTZDPfX0D2s9Rd7NBvQAAAIEAlN92+Bb7D4KLYk3IwRbXblwXdkPggA4pfdtW9v
GfJ0/RHd+NjB4eo1D+0dix6tXwYGN7PKS5R/FXPNwxHPapcj9uL1Jn2AWQ2dsknf+i/FAA
vioUPkmdMc0zuWoSOEsSNhVDtX3WdvVcGcBq9cetzrtOKWOocJmJ80qadxTRHtUAAACB
AN7CY+KKv1gHpRzFwdQm7HK9bb1LAo2KwaoXnadFgeptNBQeSXG1vO+JsvphVMBJc9HS
n24VYtYtsMu74qXviYjziVucWKjjKEb11juqnF0GDlB3VVmxHLmxnAz643WK42Z7dLM5
sY29ouezv4Xz2PuMch5VGPP+CDqzCM4loWgV
---- END SSH2 PUBLIC KEY ----