| 
SSH1 | 
SSH2 | 
OpenSSH | 
Keyword | 
Value | 
Meaning | 
  | 
  | 
  | 
# | 
Any text | 
Comment line | 
|   | 
  | 
  | 
AFSTokenPassing 
  | 
Yes/no | 
Forward AFS tokens to server | 
|   | 
N | 
  | 
AllowAgentForwarding 
  | 
Yes/no | 
Enable agent forwarding | 
|   | 
  | 
  | 
AllowedAuthentications 
  | 
Auth types | 
Permitted authentication techniques | 
|   | 
N | 
  | 
AuthenticationNotify 
  | 
Yes/no | 
Print message on stdout on successful authentication | 
|   | 
N | 
  | 
AuthenticationSuccessMsg 
  | 
Yes/no | 
Print message on stderr on successful authentication | 
  | 
  | 
  | 
BatchMode 
  | 
Yes/no | 
Disable prompting | 
|   | 
  | 
  | 
CheckHostIP 
  | 
Yes/no | 
Detect DNS spoofing | 
  | 
  | 
1 | 
Cipher 
  | 
Cipher | 
Request encryption cipher | 
|   | 
  | 
2 | 
Ciphers 
  | 
Cipher_ list | 
Supported encryption ciphers | 
  | 
  | 
  | 
ClearAllForwardings 
  | 
Yes/no | 
Ignore any specified forwarding | 
  | 
  | 
  | 
Compression 
  | 
Yes/no | 
Enable data compression | 
  | 
  | 
  | 
CompressionLevel 
  | 
0-9 | 
Select compression algorithm | 
  | 
  | 
  | 
ConnectionAttempts 
  | 
# attempts | 
# of retries by client | 
|   | 
N | 
  | 
DefaultDomain 
  | 
Domain | 
Specify domain name | 
|   | 
  | 
  | 
DontReadStdin 
  | 
Yes/no | 
Redirect stdin from /dev/ null | 
|   | 
  | 
2 | 
DSAAuthentication 
  | 
Yes/no | 
Permit SSH-2 DSA authentication | 
  | 
  | 
  | 
EscapeChar 
  | 
Character | 
Set escape character (^ = Ctrl key) | 
  | 
  | 
  | 
FallBackToRsh 
  | 
Yes/no | 
Use rsh if ssh fails | 
|   | 
  | 
  | 
ForcePTTYAllocation 
  | 
Yes/no | 
Allocate a pseudo-tty | 
  | 
  | 
  | 
ForwardAgent 
  | 
Yes/no | 
Enable agent forwarding | 
  | 
  | 
  | 
ForwardX11 
  | 
Yes/no | 
Enable X forwarding | 
  | 
  | 
  | 
GatewayPorts 
  | 
Yes/no | 
Gateway locally forwarded ports | 
  | 
  | 
1 | 
GlobalKnownHostsFile 
  | 
Filename | 
Location of global known hosts file | 
|   | 
  | 
2 | 
GlobalKnownHostsFile2 
  | 
Filename | 
Location of global known hosts file | 
|   | 
  | 
  | 
GoBackground 
  | 
Yes/no | 
Fork into background | 
  | 
  | 
  | 
Host 
  | 
Pattern | 
Begin section for this host | 
  | 
  | 
  | 
HostName 
  | 
Hostname | 
Real name of host | 
  | 
  | 
1 | 
IdentityFile 
  | 
Filename | 
Name of private key file (RSA) | 
|   | 
  | 
2 | 
IdentityFile2 
  | 
Filename | 
Name of private key file (DSA) | 
  | 
  | 
  | 
KeepAlive 
  | 
Yes/no | 
Send keepalive packets | 
  | 
  | 
  | 
KerberosAuthentication 
  | 
Yes/no | 
Permit Kerberos authentication | 
|   | 
  | 
  | 
KerberosTgtPassing 
  | 
Yes/no | 
Support ticket-granting-tickets | 
  | 
  | 
  | 
LocalForward 
  | 
Port, socket | 
Local port forwarding | 
|   | 
N | 
  | 
Macs 
  | 
Algorithm | 
Select MAC algorithm | 
|   | 
  | 
  | 
NoDelay 
  | 
Yes/no | 
Enable Nagle algorithm | 
  | 
  | 
  | 
NumberOfPasswordPrompts 
  | 
# prompts | 
# of prompts before failure | 
  | 
  | 
  | 
PasswordAuthentication 
  | 
Yes/no | 
Permit password authentication | 
|   | 
  | 
  | 
PasswordPrompt 
  | 
String | 
Password prompt | 
  | 
  | 
  | 
PasswordPromptHost 
  | 
Yes/no | 
Hostname for password prompt | 
  | 
  | 
  | 
PasswordPromptLogin 
  | 
Yes/no | 
Username for password prompt | 
  | 
  | 
  | 
Port 
  | 
Port number | 
Select server port number | 
  | 
  | 
  | 
ProxyCommand 
  | 
Command | 
Connect to proxy server | 
|   | 
  | 
  | 
QuietMode 
  | 
Yes/no | 
Quiet mode | 
|   | 
  | 
  | 
RandomSeedFile 
  | 
Filename | 
Location of random seed file | 
  | 
  | 
  | 
RemoteForward 
  | 
Port, socket | 
Remote port forwarding | 
  | 
  | 
  | 
RhostsAuthentication 
  | 
Yes/no | 
Permit .rhosts authentication | 
|   | 
  | 
  | 
RhostsPubKey-Authentication 
  | 
Yes/no | 
Permit combined authentication | 
  | 
  | 
  | 
RhostsRSAAuthentication 
  | 
Yes/no | 
Permit combined authentication | 
  | 
  | 
  | 
RSAAuthentication 
  | 
Yes/no | 
Permit public-key authentication | 
|   | 
N | 
  | 
PGPSecretKeyfile 
  | 
Filename | 
Default location of PGP private key file for authentication | 
|   | 
  | 
  | 
SkeyAuthentication 
  | 
Yes/no | 
Permit S/Key authentication | 
|   | 
N | 
  | 
SocksServer 
  | 
Server | 
Specify SOCKS server | 
|   | 
  | 
  | 
Ssh1AgentCompatibility 
  | 
Yes/no | 
Enable SSH1 agent compatibility | 
|   | 
  | 
  | 
Ssh1Compatibility 
  | 
Yes/no | 
Enable SSH1 compatibility | 
|   | 
  | 
  | 
Ssh1Path 
  | 
Filename | 
Path to ssh1 | 
|   | 
  | 
  | 
SshSignerPath 
  | 
Filename | 
Path to ssh-signer2 | 
  | 
  | 
  | 
StrictHostKeyChecking 
  | 
Yes/no/ ask | 
Behavior on host key mismatch | 
  | 
  | 
  | 
TISAuthentication 
  | 
Yes/no | 
Permit TIS authentication | 
  | 
  | 
  | 
UsePrivilegedPort 
  | 
Yes/no | 
Permit privileged port use | 
  | 
  | 
  | 
User 
  | 
Username | 
Remote username | 
  | 
  | 
1 | 
UserKnownHostsFile 
  | 
Filename | 
Location of user known hosts file | 
|   | 
  | 
2 | 
UserKnownHostsFile2 
  | 
Filename | 
Location of user known hosts file | 
  | 
  | 
  | 
UseRsh 
  | 
Yes/no | 
Use rsh instead of ssh | 
|   | 
  | 
  | 
VerboseMode 
  | 
Yes/no | 
Verbose mode | 
|   | 
  | 
  | 
XAuthLocation 
  | 
Filename | 
Location of xauth  |