User's Manual

Table Of Contents
98
Users Manual of CS-6306R
4.3.5.4 Configuring the times of authentication retrying
If the times for failed authentications exeed the maximum times, SSH server will not allow you to retry
authentication unless a new connction is established. The maximum times for retrying authentication is 3 by
default.
Run the following command in global configuration mode to configure the maximum times for retrying
authentication:
Command Purpose
Ip sshd auth-retries <0-65535> Configures the maximum times for retrying authentication.
4.3.5.5 Enabling SSH server
SSH server is disabled by default. When SSH server is enabled, the device will generate a rsa password pair,
and then listen connection requests from the client. The process takes one or two minutes.
Run the following command in global configuration mode to enable SSH server:
Command Purpose
Ip sshd enable Enables SSH server. The digit of the password is 1024.
4.3.6 SSH server Configuration Example
The following configuration only allows the host whose IP address is 192.168.20.40 to access SSH server.
The local user database is used to distinguish user ID.
4.3.6.1 Access control list
ip access-list standard ssh-acl
permit 192.168.20.40
4.3.6.2 Global configuration
aaa authentication login ssh-auth local
ip sshd auth-method ssh-auth
ip sshd access-class ssh-acl
ip sshd enable