To Next Page

To Previous Page

Step 3

Set the ClientAliveCountmax parameter to 2.

[local]host_name(config-sshd)# client-alive-countmax 2

Step 4

Set the ClientAliveInterval parameter to 5 seconds.

[local]host_name(config-sshd)# client-alive-interval 5

Step 5

Exit the SSH Configuration mode.

[local]host_name(config-sshd)# end

[local]host_name#

SSH Client Login to External Servers

StarOS supports public key authentication for SSH/SFTP access from the StarOS gateway to external servers.

You configure this feature by generating SSH client key pairs and pushing the client public key to external

servers

By default StarOS only supports username-password authentication to external servers.Note

Setting SSH Client Ciphers

The SSH Client Configuration mode ciphers CLI command configures the cipher priority list when logging

into an external server.

Step 1

Enter the SSH Client Configuration mode.

[local]host_name(config)# client ssh

Step 2

Specify the desired encryption algorithms.

[local]host_name(config-ssh)# ciphers algorithms

Notes:

•

algorithms is a string of 1 through 511 alphanumeric characters that specifies the algorithm(s) to be used as a single

string of comma-separated variables (no spaces) in priority order (left to right) from those shown below:

• blowfish-cbc – symmetric-key block cipher, Cipher Block Chaining, (CBC)

• 3des-cbc – Triple Data Encryption Standard, CBC

• aes128-cbc – Advanced Encryption Standard (AES), 128-bit key size, CBC

• aes128-ctr – AES, 128-bit key size, Counter-mode encryption (CTR)

• aes192-ctr – AES, 192-bit key size, CTR

• aes256-ctr – AES, 256-bit key size, CTR

• aes128-gcm@openssh.com – AES, 128-bit key size, Galois Counter Mode [GCM], OpenSSH

ASR 5500 System Administration Guide, StarOS Release 21.4

Getting Started

SSH Client Login to External Servers

Cisco ASR 5500 User Manual

Other manuals for Cisco ASR 5500