ForwardAgent yes ForwardX11 yes Port forwarding There is generally no reason to enable them on production servers in enterprises.

However, they increase the risk of an attack spreading from a compromised server to a user's desktop, so the most security-critical environments may want to leave them disabled. Setting these options in /etc/ssh/ssh_config makes life easier for end users, saves overhead, and reduces support load. These allow running graphical applications remotely and eliminate the need for typing a password whenever moving from one server to another, respectively. Enabling X11 forwarding and agent forwardingĭevelopers, students, and researchers often want to enable X11 forwarding and SSH agent forwarding. In most cases, just /etc/ssh/ssh_config is edited.

In practice, only a few of them are ever changed, and user-specific configuration files are rarely used.

There are many configuration options available. Contents Commonly used configuration options Enabling X11 forwarding and agent forwarding Port forwarding Configuring public key authentication Certificate-based authentication Format of SSH client config file ssh_config Listing of client configuration options Commonly used configuration options

Openssh windows gui