Admin Guide

Variable Value
• priv—Specifies a user role with access to all of the commands that the
administrator has access to, and is referred to as an emergency-admin.
However, the user with the privilege role must be authenticated within the
VSP switch locally. RADIUS and TACACS+ authentication is not
accessible. A user role at the privilege level must login to the switch
through the console port only.
Use the no operator before this parameter, no ssh rsa-user-key
WORD<1–15>, to disable SSH RSA user key.
secure Enables SSH in secure mode and immediately disables the access
services SNMP, FTP, TFTP, rlogin, and Telnet. The default is disabled.
Use the no operator before this parameter, no ssh secure, to disable
SSH in secure mode.
timeout <1-120> Specifies the SSH connection authentication timeout in seconds. Default is
60 seconds.
version <v2only> Configures the SSH version. The default is v2only.
The switch only supports SSHv2.
Verifying and displaying SSH configuration information
Verify that SSH services are enabled on the VSP switch and display SSH configuration information
to ensure that the SSH parameters are properly configured.
Procedure
1. Log on to the switch to enter User EXEC mode.
2. Verify that SSH services are enabled and view the SSH configuration:
show ssh <global|session>
Example
Display global system SSH information:
Switch:1(config)#show ssh global
Total Active Sessions : 0
version : v2only
port : 22
max-sessions : 4
timeout : 60
action rsa-host key : rsa-hostkeysize 2048
action dsa-host key : dsa-hostkeysize 1024
rsa-auth : false
dsa-auth : true
pass-auth : true
keyboard-interactive-auth : false
sftp enable : true
enable : true
authentication-type : aead-aes-128-gcm-ssh aead-aes-256-gcm-ssh hmac-sha1
hmac-sha2-256
Secure Shell
January 2017 Administering Avaya VSP 7200 Series and 8000 Series 166
Comments on this document? [e-mail]