display ssh server session

Function

The display ssh server session command displays the session information of the SSH server.

Format

display ssh server session

Parameters

None

Views

All views

Default Level

3: Management level

Task Name and Operations

Task Name Operations
ssh-server read

Usage Guidelines

After configuring the SSH attributes, you can run the display ssh server command to view the current session of the SSH server.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display SSH server session.
<HUAWEI> display ssh server session
--------------------------------------------------------------------------------
Session                                 : 1
Conn                                    : VTY 0
Version                                 : 2.0
State                                   : Started
Username                                : root123
Retry                                   : 1
CTOS Cipher                             : aes256-ctr
STOC Cipher                             : aes256-ctr
CTOS Hmac                               : hmac-sha2-256
STOC Hmac                               : hmac-sha2-256
CTOS Compress                           : none
STOC Compress                           : none
Kex                                     : diffie-hellman-group16-sha512
Public Key                              : RSA_SHA2_512
User Authentication Public Key          : RSA_SHA2_512
Service Type                            : stelnet
Authentication Type                     : password
Connection Port Number                  : 22
Idle Time                               : 00:00:01
Total Packet Number                     : 60
Packet Number after Rekey               : 60
Total Data(MB)                          : 0
Data after Rekey(MB)                    : 0
Time after Session Established(Minute)  : 0
Time after Rekey(Minute)                : 0
Total self check random counts          : 200
Total self check random fails           : 0
Self check random result                : 0
Total self check keypair counts         : 1
Total self check keypair fails          : 0
Self check keypair result               : 0

--------------------------------------------------------------------------------
Table 1 Description of the display ssh server session command output
Item Description
Session

Indicates the session ID.

Conn

Indicates the type of the SSH session. There are three types of connections:

  • VTY.
  • NCA.
  • SFTP.
Version

Indicates the protocol version of the SSH session.

State

Indicates the status of the SSH session.

Username

Indicates the username of the user for the session.

Retry

Indicates the number of retries.

CTOS Cipher

Indicates the name of the encryption algorithm from the client to the server.

CTOS Hmac

Indicates the name of the HMAC algorithm from the client to the server.

CTOS Compress

Indicates the name of the compression algorithm from the client to the server.

STOC Cipher

Indicates the name of the encryption algorithm from the server to the client.

STOC Hmac

Indicates the name of the HMAC algorithm from the server to the client.

STOC Compress

Indicates the name of the compression algorithm from the server to the client.

Kex

Indicates the name of the key exchange algorithm.

Public Key

Indicates the type of the public key. RSA_SHA2_512, RSA_SHA2_256, RSA ECC, and DSA is supported currently.

To ensure better security, it is recommended that you use the more secure RSA SHA2-512 or RSA SHA2-256 authentication algorithm.

User Authentication Public Key

The type of public key used during user authentication.

Authentication Type

Indicates the authentication type. The following are the authentication types:

  • password.
  • rsa.
  • password-rsa.
  • all.
  • ecc.
  • password-ecc.
  • dsa.
  • password-dsa.
  • sm2.
  • password-sm2.

You are advised to use a more secure ECC authentication algorithm for higher security.

Service Type

Indicates the SSH user service mode. There are three types of service modes:

  • sftp.
  • stelnet.
  • snetconf.
Connection Port Number

Indicates the port number through which connection is established.

Idle Time

Indicates the session idle time.

Time after Session Established(Minute)

Indicates the connection duration after the SSH session connection is activated, in minutes.

Time after Rekey(Minute)

Indicates the connection duration after the SSH session connection is activated and the key is re-negotiated, in minutes.

Total Packet Number

Indicates the total number of SSH session packets.

Total Data(MB)

Indicates the total data volume of the SSH session connection, in MB.

Total self check random counts

Indicates the number of random number self-check times.

Total self check random fails

Indicates the number of random number self-check failures.

Total self check keypair counts

Indicates the number of key pair consistency check times.

Total self check keypair fails

Indicates the number of key pair consistency check failures.

Packet Number after Rekey

Indicates the total number of SSH session packets after key re-negotiation.

Data after Rekey(MB)

Indicates the total data volume of the SSH session connection after key re-negotiation, in MB.

Self check random result

Indicates the random number self-check result.

Self check keypair result

Indicates the result of the key pair consistency check.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >