Prerequisites For Ssh Connections - Juniper JUNOS OS 10.3 - XML MANAGEMENT PROTOCOL GUIDE 6-30-2010 Manual

Junos 10.3 Junos XML Management Protocol Guide
30
By default, the Junos XML protocol server supports up to 75 simultaneous clear-text
sessions and 150 connection attempts per minute. Optionally, you can include either
or both the
connection-limit
and the statement to limit the number of connection attempts. Both
rate-limit
statements accept a value from
[edit]
user@host# set system services xnm-clear-text connection-limit limit
user@host# set system services xnm-clear-text rate-limit limit
For more information about the
Basics Configuration Guide.
Commit the configuration:
4.
[edit]
user@host# commit
Repeat Step 2 through Step 4 on each device where the client application establishes
5.
Junos XML protocol sessions.

Prerequisites for SSH Connections

To enable a client application to use the SSH protocol to connect to the Junos XML
protocol server, perform the following steps:
Enable the application to access the SSH software.
1.
If the application uses the Junos XML protocol Perl module provided by Juniper
Networks, no action is necessary. As part of the installation procedure for the Perl
module, you install a prerequisites package that includes the necessary SSH software.
For instructions, see "Downloading the Junos XML Protocol Perl Client and
Prerequisites Package" on page 206.
If the application does not use the Junos XML protocol Perl module, obtain the SSH
software and install it on the computer where the application runs. For information
about obtaining and installing SSH software, see
http://www.openssh.com/
Satisfy the prerequisites discussed in "Prerequisites for All Access Protocols" on
2.
page 27.
(Optional) If you want to use key-based SSH authentication for the application,
3.
create a public/private key pair and associate it with the Junos OS login account you
created in "Prerequisites for All Access Protocols" on page 27. Perform the following
steps:
a. Working on the computer where the client application runs, issue the
command in a standard command shell (not the Junos OS CLI). By providing
the appropriate arguments, you encode the public key with either RSA (supported
by SSH versions 1 and 2) or the Digital Signature Algorithm (DSA), supported
by SSH version 2. For more information, see the man page provided by your SSH
vendor for the ssh-keygen
but also supports version 1.
% ssh-keygen options
statement to limit the number of concurrent sessions
1 through 250 .
statement, see the Junos System
xnm-clear-text
http://www.ssh.com/
.
command. The Junos OS uses SSH version 2 by default
Copyright © 2010, Juniper Networks, Inc.
and
ssh-keygen