Information
The time interval that the router waits for the SSH client to respond before disconnecting an uncompleted login attempt.
Rationale:
This reduces the risk of an administrator leaving an authenticated session logged in for an extended period of time.
Solution
Configure the SSH timeout
hostname(config)#ip ssh time-out [60]
Impact:
Organizations should implement a security policy requiring minimum timeout settings for all network administrators and enforce the policy through the 'ip ssh timeout' command.
Default Value:
SSH in not enabled by default.
References:
http://www.cisco.com/en/US/docs/ios-xml/ios/security/d1/sec-cr-i3.html#GUID-5BAC7A2B-0A25-400F-AEE9-C22AE08513C6
Notes:
This cannot exceed 120 seconds.