HostName Specifies the actual hostname or IP address to log in to. Command line name Supports %h tokens, defaults to command line input hostname. User Specifies the username for remote host login. - String, overrides default user. Port Specifies the SSH server port number. 22 Integer, defaults to 22. IdentityFile Specifies the path to private key file for authentication. ~/.ssh/id_rsa etc Supports ~ and tokens, multiple files allowed, defaults to standard paths. AddKeysToAgent Controls whether to automatically add keys to ssh-agent. no yes, ask, confirm, no, or time interval (e.g. 1h). AddressFamily Specifies the address family to use for connections (e.g. IPv4 or IPv6). any any, inet, inet6. BatchMode Used for scripts, disables password prompts. no yes, no. BindAddress Specifies the local binding address. - IP address, only useful on multi-address systems. CanonicalizeHostname Controls whether to canonicalize hostnames. no no, yes, always, none. CheckHostIP Controls whether to check if host IP is in known_hosts file. no yes, no. Ciphers Specifies allowed encryption algorithms and priorities. See description Comma-separated list, supports +, -, ^ prefixes, query available options with ssh -Q cipher. Compression Enables or disables data compression. no yes, no. ControlMaster Enables sharing multiple sessions over a single network connection. no yes, ask, auto, autoask, no. ControlPath Specifies the path for control socket, used for connection sharing. - Path, supports ~ and tokens, or "none" to disable. DynamicForward Sets up local dynamic application-level port forwarding as SOCKS proxy. - [bind_address:]port, supports IPv6 with brackets. EscapeChar Sets the escape character for the connection. ~ Single character, "^" followed by letter, or "none" to disable. ForwardAgent Allows forwarding of authentication agent connection. no yes, no, path, or environment variable starting with $. ForwardX11 Enables X11 forwarding. no yes, no. GlobalKnownHostsFile Specifies the global known hosts key file. /etc/ssh/ssh_known_hosts, /etc/ssh/ssh_known_hosts2 Space-separated paths, supports ~ and tokens. HostKeyAlgorithms Specifies host key signature algorithms. See description Comma-separated list, supports +, -, ^ prefixes, query available options with ssh -Q HostKeyAlgorithms. IdentitiesOnly Only use identity files specified in config file, ignore ssh-agent. no yes, no. IdentityAgent Specifies the UNIX domain socket for communicating with authentication agent. - Path, "none", "SSH_AUTH_SOCK", or environment variable starting with $. LocalForward Sets up local port forwarding. - [bind_address:]port host:hostport, supports IPv6 with brackets. LogLevel Sets the verbosity level for logging. INFO QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2, DEBUG3. MACs Specifies message authentication code algorithms. See description Comma-separated list, supports +, -, ^ prefixes, query available options with ssh -Q mac. PasswordAuthentication Controls whether to use password authentication. yes yes, no. PreferredAuthentications Specifies the order of authentication methods. gssapi-with-mic,hostbased,publickey,keyboard-interactive,password Comma-separated list. ProxyCommand Specifies the command to connect to the server. - Command string, supports %%, %h, %n, %p, %r tokens, "none" to disable. ProxyJump Specifies jump host for proxy. - [user@]host[:port] or SSH URI, multiple comma-separated, "none" to disable. PubkeyAuthentication Controls whether to try public key authentication. yes yes, no, unbound, host-bound. RemoteForward Sets up remote port forwarding. - [bind_address:]port host:hostport, supports IPv6 with brackets. SendEnv Specifies environment variables to send to server. - Variable names, supports wildcards, multiple space-separated or multi-line. ServerAliveInterval Sets the interval for server keep-alive messages. 0 (disabled) Seconds, 0 means disabled. StrictHostKeyChecking Controls how to check host keys. ask yes, no, ask. UserKnownHostsFile Specifies the user's known hosts file. ~/.ssh/known_hosts, ~/.ssh/known_hosts2 Space-separated paths, supports ~ and tokens. VerifyHostKeyDNS Controls whether to verify host keys via DNS. no yes, no.