# SSH Server

## nv show system ssh-server

Shows SSH server configuration on the switch.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server
                                 applied
    ---------------------------  -----------------
    authentication-retries       6
    inactive-timeout             0
    login-timeout                120
    max-sessions-per-connection  10
    permit-root-login            prohibit-password
    state                        enabled
    max-unauthenticated
      session-count              100
      throttle-percent           30
      throttle-start             10

## nv show system ssh-server max-unauthenticated

Shows the number of unauthenticated SSH sessions allowed before throttling starts, the starting percentage of connections to reject above the throttle start count before reaching the session count limit, and the maximum number of unauthenticated SSH sessions allowed.

In Cumulus Linux 5.13 and later, this command also shows the CA trusted certificates key IDs for certificate-based authentication.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server max-unauthenticated
                      applied
    ----------------  -------
    session-count     100
    throttle-percent  30
    throttle-start    10

## nv show system ssh-server trusted-ca-keys

Shows certificate authentication configuration for SSH.

NVUE hides the key literal in the command output.

### Version History

Introduced in Cumulus Linux 5.13.0

### Example

    cumulus@switch:~$ nv show system ssh-server trusted-ca-keys
          operational  applied
    ---- ------------ --------
    key   *           *
    type  ssh-rsa     ssh-rsa

## nv show system ssh-server vrf

Shows the VRFs that allow SSH sessions.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server vrf

## nv show system ssh-server vrf <vrf-id>

Shows SSH session information for a specific VRF.

### Command Syntax

Syntax | Description
--- | ---
`<vrf-id>` | The VRF name.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server vrf RED

## nv show system ssh-server allow-users

Shows the users that are allowed to establish an SSH session.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server allow-users

## nv show system ssh-server allow-users <user-id>

Shows session information for a specific user allowed to establish an SSH session.

### Command Syntax

Syntax | Description
--- | ---
`<user-id>` | The user account name.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server allow-users user1

## nv show system ssh-server deny-users

Shows the users that are not allowed to establish an SSH session.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server deny-users

## nv show system ssh-server deny-users <user-id>

Shows information for a specific user not allowed to establish an SSH session.

### Command Syntax

Syntax | Description
--- | ---
`<user-id>` | The user account name.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server deny-users user3

## nv show system ssh-server port

Shows TCP port numbers that listen for incoming SSH sessions.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server port

## nv show system ssh-server port <port-id>

Shows information about a TCP port number that listens for incoming SSH sessions.

### Command Syntax

Syntax | Description
--- | ---
`<port-id>` | The port number.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server port 443

## nv show system ssh-server active-sessions

Shows the current number of active SSH sessions on the switch.

### Version History

Introduced in Cumulus Linux 5.6.0

### Example

    cumulus@switch:~$ nv show system ssh-server active-sessions
    Peer Address:Port    Local Address:Port      State
    -------------------  ----------------------  -----
    192.168.200.1:46528  192.168.200.11%mgmt:22  ESTAB