Optional ssh parameters – Brocade Communications Systems Brocade ICX 6650 6650 User Manual

Page 89

Advertising
background image

Brocade ICX 6650 Security Configuration Guide

69

53-1002601-01

Optional SSH parameters

Syntax: ip ssh pub-key-file tftp tftp-server-ip-addr filename | remove

The tftp-server-ip-addr variable is the IP address of the tftp server that contains the public key file
that you want to import into the Brocade device.

The filename variable is the name of the public key file that you want to import into the Brocade
device.

The remove parameter deletes the public keys from the device.

To display the currently loaded public keys, enter the following command.

Syntax: show ip client-pub-key [begin expression | exclude expression | include expression]

To clear the public keys from the buffers, enter the following command.

Brocade# clear public-key

Syntax: clear public-key

Enabling DSA or RSA challenge-response authentication

DSA and RSA challenge-response authentication is enabled by default. You can disable or
re-enable it manually.

To enable DSA and RSA challenge-response authentication.

Brocade(config)# ip ssh key-authentication yes

To disable DSA and RSA challenge-response authentication.

Brocade(config)# ip ssh key-authentication no

Syntax: ip ssh key-authentication yes | no

Optional SSH parameters

You can adjust the following SSH settings on the Brocade device:

The number of SSH authentication retries

The user authentication method the Brocade device uses for SSH connections

Brocade# show ip client-pub-key
---- BEGIN SSH2 PUBLIC KEY ----
Comment: DSA Public Key
AAAAB3NzaC1kc3MAAACBAPY8ZOHY2yFSJA6XYC9HRwNHxaehvx5wOJ0rzZdzoSOXxbET
W6ToHv8D1UJ/
z+zHo9Fiko5XybZnDIaBDHtblQ+Yp7StxyltHnXF1YLfKD1G4T6JYrdH YI14Om
1eg9e4NnCRleaqoZPF3UGfZia6bXrGTQf3gJq2e7Yisk/gF+1VAAAAFQDb8D5cv
wHWTZDPfX0D2s9Rd7NBvQAAAIEAlN92+Bb7D4KLYk3IwRbXblwXdkPggA4pfdtW9v
GfJ0/RHd+NjB4eo1D+0dix6tXwYGN7PKS5R/FXPNwxHPapcj9uL1Jn2AWQ2dsknf+i/FAA
vioUPkmdMc0zuWoSOEsSNhVDtX3WdvVcGcBq9cetzrtOKWOocJmJ80qadxTRHtUAAACB
AN7CY+KKv1gHpRzFwdQm7HK9bb1LAo2KwaoXnadFgeptNBQeSXG1vO+JsvphVMBJc9HS
n24VYtYtsMu74qXviYjziVucWKjjKEb11juqnF0GDlB3VVmxHLmxnAz643WK42Z7dLM5
sY29ouezv4Xz2PuMch5VGPP+CDqzCM4loWgV
---- END SSH2 PUBLIC KEY ----

Advertising