Explains the controls that authenticate SSH users, restrict access methods, protect forwarded application traffic, prioritize connection packets, and end inactive sessions on Cisco IOS XR routers.
SSH access and connection controls are security and resource-management functions that
-
strengthen identity verification and limit failed authentication
-
govern permitted SSH services and packet handling, and
-
close inactive connections and channels before they exhaust router resources.
These controls include FIDO2 and Duo MFA, authentication-method selection, port forwarding, DSCP marking, and separate timeouts for unused connections and idle channels.