Force user on SSH port

At the bottom of sshd_config:

Port 5000
Match User root, LocalPort 5000
DenyUsers root

https://serverfault.com/questions/247291/forced-per-user-ssh-port