ssh-config
The ssh-config element is used to set the attributes of the SSH/SFTP server.
Parameters
- rekey-interval
- Enter the number of minutes
before rekeying an SSH session.
- Default: 60
- Values: Min: 60 / Max: 600
- rekey-byte-count
- Enter the number of bytes, as a power of 2, to be transmitted
before rekeying an SSH session. For example: 31 means 2^31 or 2147483648
bytes.
- Default: 31
- Values: Min: 20 / Max: 31
- encr-algorithms
- Enter the list of encryption algorthims which the SSH server
should offer during session negotiation. Entries may be single values or a
comma-separated list in double quotes. The SSH session will use the first
algorithm which both the client and server support. The list of supported
ciphers are updated per release as weaker ciphers are deprecated and then
removed. See the Release Notes for the list of algorithms supported in this
release.
- Default: Type
?to see the default algorithms for this release. - Values: Type
?to see the supported values for this release.
- Default: Type
- hmac-algorithms
- Enter the list of HMAC algorithms which the SSH server should
offer during session negotitation. Entries may be single values or a
comma-separated list in double quotes. The SSH session will use the first
algorithm which both the client and server support. See the Release Notes
for the list of algorithms supported in this release.
- Default: Type
?to see the default algorithms for this release. - Values: Type
?to see the supported values for this release.
- Default: Type
- hostkey-algorithms
- Enter the list of host key algorithms which the SSH server
should offer during session negotitation. Entries may be single values or a
comma-separated list in double quotes. The SSH session will use the first
algorithm which both the client and server support. See the Release Notes
for the list of algorithms supported in this release.
- Default: Type
?to see the default algorithms for this release. - Values: Type
?to see the supported values for this release.
- Default: Type
- keyex-algorithms
- Enter the list of key exchange algorithms which the SSH server
should offer during session negotitation. Entries may be single values or a
comma-separated list in double quotes. The SSH session will use the first
algorithm which both the client and server support. See the Release Notes
for the list of algorithms supported in this release.
- Default: Type
?to see the default algorithms for this release. - Values: Type
?to see the supported values for this release.
- Default: Type
- proto-neg-time
- Enter the number of seconds allocated for SSH session negotiation.
- Default: 60
- Values: Min: 30 / Max: 60
- tcp-keep-alive
- Enable or disable the TCP keep-alive timer.
- Default: enabled
- Values: enabled | disabled
- client-idle-timeout
- Enter the number of minutes after which an inactive client will
be disconnected. A value of 0 disables the idle client timeout.
- Default: 0
- Values: Min: 0 / Max: 59
Path
ssh-config is an element under the security path. The full path from the topmost ACLI prompt is: configure terminal , security , ssh-config.