ssh server rekey-interval

Syntax

ssh server rekey-interval hours

undo ssh server rekey-interval

View

System view

Default level

3: Manage level

Parameters

hours: Specifies an interval (in hours ) for updating the server key pair, in the range of 1 to 24.

Description

Use ssh server rekey-interval to set the interval for updating the RSA server key.

Use undo ssh server rekey-interval to restore the default.

By default, the update interval of the RSA server key is 0, and the RSA server key is not updated.

Periodically updating the RSA server key can prevent malicious hacking of the key and enhance security of the SSH connections.

This command is only available to SSH users using SSH1 client software.

This command is not available in FIPS mode.

The system does not update any DSA key pair periodically.

Related commands: display ssh server.

Examples

# Set the RSA server key pair update interval to 3 hours.

<Sysname> system-view
[Sysname] ssh server rekey-interval 3