SSH client Configuration

Basically, detailed settings of the SSH client are placed in/Etc/ssh/ssh_configInside!

The "/etc/ssh/ssh_config" file is a configuration file within the OpenSSH system.Allows you to change the client by setting different optionsProgram.

Each line of this file contains a keyword-value match, where the keyword is case-insensitive. The following are the most important keywords. You can use the man command to view the Help Page (SSH (1) to obtain a detailed list.

 
#Site-wide defaults for various optionsHost *Forwardagent noforwardx11 norhostsauthentication norhostsrsaauthentication norsaauthentication yespasswordauthentication yesfallbacktorsh nousersh nobatchmode nocheckhostyesip stricthostkeychecking noidentityfile ~/. Ssh/Identityport22Cipher blowfishescapechar ~
 

The preceding options are described as follows:

Host *
The "host" option is only valid for computers that can match the strings below. "*" Indicates all computers.

Forwardagent No
"Forwardagent" sets whether the connection is forwarded to a remote computer by a verified proxy (if any.

Forwardx11 No
"Forwardx11" sets whether the X11 connection is automatically redirected to a secure channel and display set ).

RhostsAuthentication No
"RhostsAuthentication" sets whether to use rhosts-based security verification.

RhostsRSAAuthentication No
"RhostsRSAAuthentication" sets whether to use RSAAlgorithmRhosts-based security verification.

Rsaauthentication Yes
"Rsaauthentication" sets whether to use the RSA Algorithm for security verification.

Passwordauthentication Yes
"Passwordauthentication" sets whether to use password verification.

Fallbacktorsh No
"Fallbacktorsh" sets whether to use RSH automatically if an error occurs during SSH connection.

Usersh No
"Usersh" sets whether to use "rlogin/rsh" on this computer ".

Batchmode No
If "batchmode" is set to "yes", the passphrase/password (Interactive Password Input) Prompt will be disabled. This option is useful for script files and batch processing tasks when a password cannot be entered interactively.

Checkhostip Yes
"Checkhostip" sets SSH to check the IP address of the host connected to the server to prevent DNS spoofing. We recommend that you set it to "yes ".

Stricthostkeychecking No
If "stricthostkeychecking" is set to "yes", SSH will not automatically add the computer's key "$ home /. SSH/known_hosts, and the connection is denied once the key of the computer changes.

Identityfile ~ /. Ssh/identity
"Identityfile" sets the file from which the user's RSA Security Authentication ID is read.

Port 22
"Port" sets the port to connect to the remote host.

Cipher blowfish
"Cipher" sets the password for encryption.

Escapechar ~
"Escapechar" sets the escape character.

Self-http://firesk.blog.51cto.com/180373/51776