version 1.87.2.1, 2006/09/30 04:06:51 |
version 1.88, 2006/03/13 10:14:29 |
|
|
to disable the escape |
to disable the escape |
character entirely (making the connection transparent for binary |
character entirely (making the connection transparent for binary |
data). |
data). |
.It Cm ExitOnForwardFailure |
|
Specifies whether |
|
.Xr ssh 1 |
|
should terminate the connection if it cannot set up all requested |
|
dynamic, local, and remote port forwardings. |
|
The argument must be |
|
.Dq yes |
|
or |
|
.Dq no . |
|
The default is |
|
.Dq no . |
|
.It Cm ForwardAgent |
.It Cm ForwardAgent |
Specifies whether the connection to the authentication agent (if any) |
Specifies whether the connection to the authentication agent (if any) |
will be forwarded to the remote machine. |
will be forwarded to the remote machine. |
|
|
be disclosed. |
be disclosed. |
The default is |
The default is |
.Dq no . |
.Dq no . |
Note that existing names and addresses in known hosts files |
Note that hashing of names and addresses will not be retrospectively applied |
will not be converted automatically, |
to existing known hosts files, but these may be manually hashed using |
but may be manually hashed using |
|
.Xr ssh-keygen 1 . |
.Xr ssh-keygen 1 . |
.It Cm HostbasedAuthentication |
.It Cm HostbasedAuthentication |
Specifies whether to try rhosts based authentication with public key |
Specifies whether to try rhosts based authentication with public key |
|
|
for protocol version 2. |
for protocol version 2. |
Additionally, any identities represented by the authentication agent |
Additionally, any identities represented by the authentication agent |
will be used for authentication. |
will be used for authentication. |
.Pp |
|
The file name may use the tilde |
The file name may use the tilde |
syntax to refer to a user's home directory or one of the following |
syntax to refer to a user's home directory. |
escape characters: |
|
.Ql %d |
|
(local user's home directory), |
|
.Ql %u |
|
(local user name), |
|
.Ql %l |
|
(local host name), |
|
.Ql %h |
|
(remote host name) or |
|
.Ql %r |
|
(remote user name). |
|
.Pp |
|
It is possible to have |
It is possible to have |
multiple identity files specified in configuration files; all these |
multiple identity files specified in configuration files; all these |
identities will be tried in sequence. |
identities will be tried in sequence. |
|
|
over another method (e.g.\& |
over another method (e.g.\& |
.Cm password ) |
.Cm password ) |
The default for this option is: |
The default for this option is: |
.Do gssapi-with-mic , |
.Dq hostbased,publickey,keyboard-interactive,password . |
hostbased, |
|
publickey, |
|
keyboard-interactive, |
|
password |
|
.Dc . |
|
.It Cm Protocol |
.It Cm Protocol |
Specifies the protocol versions |
Specifies the protocol versions |
.Xr ssh 1 |
.Xr ssh 1 |
|
|
.Cm ServerAliveCountMax |
.Cm ServerAliveCountMax |
is left at the default, if the server becomes unresponsive, |
is left at the default, if the server becomes unresponsive, |
ssh will disconnect after approximately 45 seconds. |
ssh will disconnect after approximately 45 seconds. |
This option applies to protocol version 2 only. |
|
.It Cm ServerAliveInterval |
.It Cm ServerAliveInterval |
Sets a timeout interval in seconds after which if no data has been received |
Sets a timeout interval in seconds after which if no data has been received |
from the server, |
from the server, |
|
|
To disable TCP keepalive messages, the value should be set to |
To disable TCP keepalive messages, the value should be set to |
.Dq no . |
.Dq no . |
.It Cm Tunnel |
.It Cm Tunnel |
Request |
Request starting |
.Xr tun 4 |
.Xr tun 4 |
device forwarding between the client and the server. |
device forwarding between the client and the server. |
|
This option also allows requesting layer 2 (ethernet) |
|
instead of layer 3 (point-to-point) tunneling from the server. |
The argument must be |
The argument must be |
.Dq yes , |
.Dq yes , |
.Dq point-to-point |
.Dq point-to-point , |
(layer 3), |
.Dq ethernet , |
.Dq ethernet |
|
(layer 2), |
|
or |
or |
.Dq no . |
.Dq no . |
Specifying |
|
.Dq yes |
|
requests the default tunnel mode, which is |
|
.Dq point-to-point . |
|
The default is |
The default is |
.Dq no . |
.Dq no . |
.It Cm TunnelDevice |
.It Cm TunnelDevice |
Specifies the |
Force a specified |
.Xr tun 4 |
.Xr tun 4 |
devices to open on the client |
device on the client. |
.Pq Ar local_tun |
Without this option, the next available device will be used. |
and the server |
|
.Pq Ar remote_tun . |
|
.Pp |
|
The argument must be |
|
.Sm off |
|
.Ar local_tun Op : Ar remote_tun . |
|
.Sm on |
|
The devices may be specified by numerical ID or the keyword |
|
.Dq any , |
|
which uses the next available tunnel device. |
|
If |
|
.Ar remote_tun |
|
is not specified, it defaults to |
|
.Dq any . |
|
The default is |
|
.Dq any:any . |
|
.It Cm UsePrivilegedPort |
.It Cm UsePrivilegedPort |
Specifies whether to use a privileged port for outgoing connections. |
Specifies whether to use a privileged port for outgoing connections. |
The argument must be |
The argument must be |