Syntax
ssh server rekey-interval hours
undo ssh server rekey-interval
Default
The interval for updating the RSA server key pair is 0, and the system does not update the RSA server key
pair.
Views
System view
Predefined user roles
network-admin
Parameters
hours: Specifies an interval for updating the server key pair, in the range of 1 to 24 hours.
Usage guidelines
Updating the RSA server key pair periodically can prevent malicious hacking to the key pair and
enhance security of the SSH connections.
This command only takes effect to SSH users that use SSH1 client software.
This command is not available in FIPS mode.
Examples
# Set the RSA server key pair update interval to 3 hours.
<Sysname> system-view
[Sysname] ssh server rekey-interval 3
Related commands
display ssh server
ssh user
Use ssh user to create an SSH user and specify the service type and authentication method.
Use undo ssh user to delete an SSH user.
Syntax
In non-FIPS mode:
ssh user username service-type { all | scp | sftp | stelnet } authentication-type { password | { any |
password-publickey | publickey } assign publickey keyname }
undo ssh user username
In FIPS mode:
ssh user username service-type { all | scp | sftp | stelnet } authentication-type { password |
password-publickey assign publickey keyname }
237