set ssh server allowed-auth

Use this command to set the allowed authentication methods when connecting to the SSH server.

Syntax

set ssh server allowed-auth {[password {enable | disable}] [pubkey {enable | disable}]}

Parameters

password Specifies that entering a password is an allowed or disallowed SSH server authentication method when connecting to this device. Enabled by default.
pubkey Specifies that the public key SSH server authentication method is an allowed or disallowed SSH server authentication method when connecting to this device. Disabled by default.

Defaults

Password is enabled, pubkey is disabled.

Mode

All command modes.

Usage

During an SSH handshake the SSH server will advertise to the client a list of allowed authentication methods. The client then attempts authorization using one of the allowed methods. If the first attempt fails, the client may try subsequent attempts using the other allowed methods until either a method succeeds and the user is allowed to connect or all methods are exhausted.

Both the password and public key authentication methods are supported. The password authentication method is enabled by default. To use either method, SSH must be enabled on the device.

To use the public key authentication method:

  • Enable the public key authentication method using this command
  • Assure that at least one authkey is configured using set ssh server allowed-auth or that PKI is configured

Example

This example shows how to set the password authentication method to disabled and the public key authentication method to enabled on this SSH server:

System(rw)->set ssh server allowed-auth password disable pubkey enable