HP-UX Secure Shell Getting Started Guide

HostKeyAlgorithms ssh-dsa
HostKeyAlias
Use this directive to specify an alias that must be used, instead of the real host name, when
looking up or saving the host key in the host key database files. This directive can also be used
to tunnel secure connections or for multiple servers running on a single host.
This directive does not have a default value.
For example:
HostKeyAlias server01
HostName
Use this directive to specify the real host name to log in to. This directive can also be used to
specify nicknames or abbreviations for hosts.
Numeric IP addresses are permitted on both the command line and HostName specifications.
The default setting is the name given on the command line.
For example:
HostName john.users.com
IdentityFile
Use this directive to specify a file from which the RSA or DSA authentication identity of the user
is read.
The default setting is as follows:
For SSH-1:
$HOME/.ssh/identity
For SSH-2:
$HOME/.ssh/id_rsa and $HOME/.ssh/id_dsa
For example:
IdentityFile $HOME/.ssh/id_rsa
IdentitiesOnly
Use this directive to specify that ssh must use only the authentication identity files configured
in the ssh_config file, even if thessh-agent offers more identities.
The default setting is no.
For example:
IdentitiesOnly no
LocalForward
Use this directive to specify that a TCP/IP port on the local host must be forwarded over the
secure channel to the specified host and port of the remote host. The first value must
be[bind_address: ] port. The second value must be host:hostport. The IPv6 addresses
can be specified by enclosing addresses in square brackets or by using the following syntax:
[bind_address/] port or host / hostport.
You can specify multiple forwardings on the command line. Only the superuser can forward
privileged ports. By default, the local port is bound in accordance with the GatewayPorts
setting. However, you can use an explicit bind_address to bind the connection to a specific
address. Thebind_address of localhost indicates that the listening port is bound for local
use only. An empty address or star (*) indicates that the port is available for all interfaces.
This directive does not have a default value.
For example:
Client Configuration Directives 89