3.74. RemoteMgmtSSH

Description

Configure a Secure Shell (SSH) Server to enable remote management access to the system.

Properties

Index
The index of the object, starting at 1. (Identifier)
Name
Specifies a symbolic name for the SSH server. (Identifier)
Port
The listening port for the SSH server. (Default: 22)
AllowHostKeyDSA
Allow DSA public key algorithm. (Default: No)
AllowHostKeyRSA
Allow RSA public key algorithm. (Default: Yes)
AllowHostKeyECDSA
Allow ECDSA public key algorithm. (Default: Yes)
AllowKexDH14
Allow Diffie-Hellman Group 14 key exchange algorithm. (Default: Yes)
AllowKexDH1
Allow Diffie-Hellman Group 1 key exchange algorithm. (Default: No)
AllowAES128CBC
Allow AES-128-CBC encryption algorithm. (Default: No)
AllowAES128CTR
Allow AES-128-CTR encryption algorithm. (Default: Yes)
AllowAES128GCM
Allow AES-128-GCM encryption algorithm. (Default: Yes)
AllowAES192CBC
Allow AES-192-CBC encryption algorithm. (Default: No)
AllowAES192CTR
Allow AES-192-CTR encryption algorithm. (Default: Yes)
AllowAES256CBC
Allow AES-256-CBC encryption algorithm. (Default: No)
AllowAES256CTR
Allow AES-256-CTR encryption algorithm. (Default: Yes)
AllowAES256GCM
Allow AES-256-GCM encryption algorithm. (Default: Yes)
AllowCHACHA20
Allow Chacha20-Poly1305 encryption algorithm. (Default: Yes)
AllowBlowfish
Allow Blowfish encryption algorithm. (Default: No)
Allow3DES
Allow 3DES encryption algorithm. (Default: No)
AllowMACSHA1
Allow SHA1 integrity algorithm. (Default: Yes)
AllowMACMD5
Allow MD5 integrity algorithm. (Default: No)
AllowMACSHA196
Allow SHA1-96 integrity algorithm. (Default: No)
AllowMACMD596
Allow MD5-96 integrity algorithm. (Default: No)
AllowMACSHA2256
Allow SHA2-256 integrity algorithm. (Default: Yes)
AllowMACSHA2512
Allow SHA2-512 integrity algorithm. (Default: Yes)
Banner
Specifies the greeting message to display when the user logs in. (Default: "Welcome,\r\n\r\n - Type \"help\" to see a list of available commands.\r\n - To get help on a specific command, type \"help command\".\r\n - A summary of the options for a command is displayed with \"command -?\".\r\n\r\nUse the tab key to get a list of valid choices for the current command or option.\r\nConsult the CLI reference guide for more information.\r\n")
MaxSessions
The maximum number of clients that can be connected at the same time. (Default: 5)
SessionIdleTime
The number of seconds a user can be idle before the session is closed. (Default: 1800)
LoginGraceTime
When the user has supplied the username, the password has to be provided within this number of seconds or the session will be closed. (Default: 30)
AuthenticationRetries
The number of retries allowed before the session is closed. (Default: 3)
AccessLevel
The access level to grant the user or system that logs in. (Default: Admin)
AuthMethod
Allowed client authentication methods. (Default: Any)
AuthProfile
Specifies the authentication profile to use when authenticating SSH access.
LogEnabled
Enable logging. (Default: Yes)
SourceNetwork
Specifies the source network for which remote access is granted.
DestinationNetwork
Specifies the destination network for which remote access is granted. (Default: all-nets)
SourceInterface
Specifies the source interface for which remote access is granted.
DestinationInterface
Specifies the destination interface for which remote access is granted. (Default: core)
Comments
Text describing the current object. (Optional)