vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-11-02 20:02:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #310 from erkin/master

Browse Source 
Fix RST typo and add update SSH service commands
This commit is contained in:
Daniil Baturin 2020-08-20 19:17:01 +07:00 committed by GitHub
commit db2000354a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 30 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
docs/services/ssh.rst
View File

@ -53,7 +53,7 @@ choose from the following ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``,
Disable password based authentication. Login via SSH keys only. This hardens
security!
.. cfgcmd: set service ssh disable-host-validation
.. cfgcmd:: set service ssh disable-host-validation
Disable the host validation through reverse DNS lookups - can speedup login
time when reverse lookup is not possible.
@ -74,5 +74,33 @@ Multiple algorithms can be provided. Supported MACs: ``hmac-md5``,
.. note:: VyOS 1.1 supported login as user ``root``. This has been removed due
to tighter security in VyOS 1.2.
.. seealso:: SSH :ref:`ssh_key_based_authentication`
.. cfgcmd:: set service ssh access-control <allow | deny> <group | user> <name>
Add access-control directive to allow or deny users and groups. Directives are
processed in the following order of precedence: ``deny-users``, ``allow-users``,
``deny-groups`` and ``allow-groups``.
.. cfgcmd:: set service ssh client-keepalive-interval <interval>
Specify timeout interval for keepalive message in seconds.
.. cfgcmd:: set service ssh key-exchange <kex>
Specify allowed :abbr:`KEX (Key Exchange)` algorithms.
Supported algorithms: ``diffie-hellman-group1-sha1``,
``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``,
``diffie-hellman-group16-sha512``, ``diffie-hellman-group18-sha512``,
``diffie-hellman-group-exchange-sha1``,
``diffie-hellman-group-exchange-sha256``, ``ecdh-sha2-nistp256``,
``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``, ``curve25519-sha256`` and
``curve25519-sha256@libssh.org``.
.. cfgcmd:: set service ssh loglevel <quiet | fatal | error | info | verbose>
Set the ``sshd`` log level. The default is ``info``.
.. cmfcmd:: set service ssh vrf <name>
Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance.
.. seealso:: SSH :ref:`ssh_key_based_authentication`