Secure SSHD: Part 2

- [Narrator] Whenever possible…use the SSH2 version of the SSH protocol.…It contains several improvements over SSHv1.…Some of those improvements include…a different set of improved and stronger algorithms…for encryption and authentication.…Use the protocol configuration directive…in the SSHD config file followed…by 2 to force version 2 of the SSH protocol.…By default, SSH will listen on all addresses on the system.…If you want to control what IP address SSHD binds to…use the listen address directive…and specify the IP to listen on.…

If you want to listen on multiple IP addresses…use multiple listen address lines.…You can use this in situations…where you have a system that is connected to both…a public and a private network.…This way you can force SSH to only listen…on the private network and reduce your attack surface.…By default, SSH runs on port 22.…If you want to change the default port…supply the new port number to the port directive…in the SSHD underscore config file.…Changing the port that SSH listens on…