SSH server configuration task list

Tasks at a glance

Remarks

(Optional.) Generating local key pairs

N/A

(Optional.) Setting the SSH listening port

N/A

(Required.) Enabling the Stelnet server

Required for Stelnet servers.

(Required.) Enabling the SFTP server

Required for SFTP servers.

(Required.) Enabling the SCP server

Required for SCP servers.

(Required.) Configuring NETCONF over SSH

Required for NETCONF-over-SSH servers.

(Required.) Configuring user lines for SSH login

Required for Stelnet servers and NETCONF-over-SSH servers.

(Required.) Configuring a client's host public key

Required if the authentication method is publickey, password-publickey, or any.

Configuring the PKI domain for verifying the client certificate

See "Configuring PKI."

Required if the following conditions exist:

  • The authentication method is publickey.

  • The clients send the public keys to the server through digital certificates for validity check.

The PKI domain must have the CA certificate to verify the client certificate.

(Required/optional.) Configuring an SSH user

Required if the authentication method is publickey, password-publickey, or any.

Optional if the authentication method is password.

(Optional.) Configuring the SSH management parameters

N/A

(Optional.) Specifying a PKI domain for the SSH server

N/A