ssh server

Description

Use the ssh server command to configure the Secure Shell (SSH) server.

Syntax

ssh server enable
no ssh server enable

ssh server host-key <key type> {private-key <private key> | public-key <public key>}

ssh server host-key generate

ssh server listen enable
no ssh server listen enable

ssh server listen interface <interface>
no ssh server listen interface <interface>

ssh server min-version <version number>
no ssh server min-version

ssh server ports <port> [<port>] [<port>] ...

Arguments

enable	Enables Secure Shell (SSH) access to this system. Use the no form of this command to diable SSH access to this system.
host-key	Manipulates the host keys for SSH.
<key type>	Specifies the type of host keys to create. The choices are: • rsa1 RSAv1 • rsa2 RSAv2 • dsa2 DSAv2
private-key <private key>	Sets a new private-key for the host keys of the type you specify.
public-key <public key>	Sets a new public-key for the host keys of the type you specify.
generate	Generates new RSA and DSA host keys for SSH.
listen enable	Enables SSH interface restriction access to this system. Use the no form of this command to disable SSH interface restriction access to this system.
listen interface <interface>	Adds an interface to the SSH server access restriction list. Use the no form of this command to remove the specified interface from the SSH server access restriction list.
min-version <version number>	Sets the minimum version of SSH protocol supported. Use the no form of this command to reset the minimum version of SSH protocol supported.
ports <port> [<port>] [<port>] ...	Specifies the ports that the SSL server will listen on. When you hit the carriage return, it sets this list as the entire set of SSH server ports, removing all others.

Defaults

None.

Command Mode

Global Configuration Mode

See Also

See the following related commands:

n	“ssh client user”

n	“show ssh”

Usage Guidelines

If you use the optional listen argument, then the ssh server listen enable command enables SSH interface restriction access to this system.

Examples

To remove lan0 from the SSH server access restriction list:

(config) # no ssh server listen interface lan0

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.