Administration of the Avaya G350 Media Gateway - Avaya Support

Managing login permissionsSSH ConfigurationUse the ip ssh enable command to enable SSH authentication and set the SSH parameters.Use the no form of this command to disable the SSH server. Disabling the server disconnectsall active SSH sessions. By default, SSH is enabled.You can set the following SSH parameters using the ssh enable command:●timeout — sets the time interval (in seconds) that the SSH server waits for the SSHclient to respond. If this time elapses with no response, the session’s SSH serverdisconnects. The timeout can be from 20 to 400 seconds. The default value is 120.Note:Note:This parameter applies to the SSH negotiation phase. Once an SSH session isestablished, the CLI timeout applies.●●●●authentication-retries — the number of connection attempts after which the SSHserver disconnects. This parameter can be from 1 to 5. The default value is 3.rsa-authentication — enables (yes) or disables (no) the public key authenticationmethod. By default, public key authentication is disabled.password-authentication — enables (yes) or disables (no) the passwordauthentication method. By default, password authentication is enabled.port — changes the default value of the SSH port. Changing the port number does notinterrupt active connections. The default value is 22.Use the ssh-client known-hosts command to clear the client’s list of server fingerprints.Each client maintains a list of server fingerprints. If a key changes, the client’s verification of theserver’s fingerprint will fail, thereby preventing the client’s access to the server. If this happens,you can use the ssh-client known-hosts command to erase the client’s server fingerprintlist. This enables the client to access the server and begin to recreate its list of fingerprints withthe server’s new fingerprint.Use the crypto key generate dsa command to generate an SSH host key pair.Use the disconnect ssh command to disconnect an existing SSH session.Use the show ip ssh command to display a list of active SSH sessions.SCP protocol supportIn addition to data transfer via an SSH session, the SSH protocol is also used to support SCPfor secure file transfer. When using SCP, the G350 is the client, and an SCP server must beinstalled on the management station. After users are defined on the SCP server, the G350 actsas an SCP client.The process of establishing an SCP session is the same process as described in SSH protocolsupport on page 38, except that the roles of the G350 and the client computer are reversed.Issue 3 January 2005 39