Brocade Communications Systems Brocade ICX 6650 6650 Manual De Usuario
Brocade ICX 6650 Security Configuration Guide
71
53-1002601-01
Optional SSH parameters
Enabling empty password logins
By default, empty password logins are not allowed. This means that users with an SSH client are
always prompted for a password when they log into the device. To gain access to the device, each
user must have a user name and password. Without a user name and password, a user is not
granted access.
always prompted for a password when they log into the device. To gain access to the device, each
user must have a user name and password. Without a user name and password, a user is not
granted access.
If you enable empty password logins, users are not prompted for a password when they log in. Any
user with an SSH client can log in without being prompted for a password.
user with an SSH client can log in without being prompted for a password.
To enable empty password logins, enter the following command.
Brocade(config)# ip ssh permit-empty-passwd yes
Syntax: ip ssh permit-empty-passwd no | yes
Setting the SSH port number
By default, SSH traffic occurs on TCP port 22. You can change this port number. For example, the
following command changes the SSH port number to 2200.
following command changes the SSH port number to 2200.
Brocade(config)# ip ssh port 2200
Note that if you change the default SSH port number, you must configure SSH clients to connect to
the new port. Also, you should be careful not to assign SSH to a port that is used by another
service. If you change the SSH port number, Brocade recommends that you change it to a port
number greater than 1024.
the new port. Also, you should be careful not to assign SSH to a port that is used by another
service. If you change the SSH port number, Brocade recommends that you change it to a port
number greater than 1024.
Syntax: ip ssh port number
Setting the SSH login timeout value
When the SSH server attempts to negotiate a session key and encryption method with a connecting
client, it waits a maximum of 120 seconds for a response from the client. If there is no response
from the client after 120 seconds, the SSH server disconnects. You can change this timeout value
to between 1–120 seconds. For example, to change the timeout value to 60 seconds, enter the
following command.
client, it waits a maximum of 120 seconds for a response from the client. If there is no response
from the client after 120 seconds, the SSH server disconnects. You can change this timeout value
to between 1–120 seconds. For example, to change the timeout value to 60 seconds, enter the
following command.
Brocade(config)# ip ssh timeout 60
Syntax: ip ssh timeout seconds
Designating an interface as the source for all SSH packets
You can designate a loopback interface, virtual interface, or Ethernet port as the source for all SSH
packets from the device. For more information, refer to Brocade ICX 6650 Layer 3 Routing
Configuration Guide.
packets from the device. For more information, refer to Brocade ICX 6650 Layer 3 Routing
Configuration Guide.
Configuring the maximum idle time for SSH sessions
By default, SSH sessions do not time out. Optionally, you can set the amount of time an SSH
session can be inactive before the Brocade device closes it. For example, to set the maximum idle
time for SSH sessions to 30 minutes, enter the following command.
session can be inactive before the Brocade device closes it. For example, to set the maximum idle
time for SSH sessions to 30 minutes, enter the following command.