Enabling Ssh Remote Access - D-Link NetDefend DFL-210 User Manual

2.1.4. Web Interface
SSH (Secure Shell)
The SSH (Secure Shell) protocol can be used to access the CLI over the network from a remote
host. SSH is a protocol primarily used for secure communication over insecure networks, providing
strong authentication and data integrity.
NetDefendOS supports version 1, 1.5 and 2 of the SSH protocol.
SSH access is regulated by the remote management policy in NetDefendOS, and is disabled by de-
fault.
Example 2.1. Enabling SSH Remote Access
This example shows how to enable remote SSH access from the lannet network through the lan interface by
adding a rule to the remote management policy.
CLI
gw-world:/> add RemoteManagement RemoteMgmtSSH ssh Network=lannet Interface=lan
Web Interface
1. Go to System > Remote Management > Add > Secure Shell Management
2. Enter a Name for the SSH remote management policy, e.g. ssh.
3. Select the following from the dropdown lists:
• User Database: AdminUsers
• Interface: lan
• Network: lannet
4. Click OK.
2.1.3.2. Common CLI Operations
Logging on to the CLI
When access to the CLI has been established using one of the methods described in the earlier sec-
tions, you need to logon to the system before being able to execute any CLI command. This authen-
tication step is needed to ensure that only trusted users can access the system, as well as providing
user information for the audit mechanism.
The CLI uses the common user authentication mechanisms provided. In other words, local user
databases as well as external user databases can be used to lookup user credentials for CLI access.
For more information about user authentcation, please see section Chapter 8, User Authentication.
When accessing the CLI, the system will respond with the login prompt. Enter your username and
press Enter, followed by your password and Enter. After a successful logon you will see the com-
mand prompt. If a welcome message has been set then it will be displayed directly after the logon:
gw-world:/>
For security reasons, it can be better to disable or anonymize the CLI welcome message.
Logging off from the CLI
After finishing working with the CLI, you should logout to avoid other people getting unauthorized
access to the system. Log off by using the exit or the logout command.
LocalUserDatabase=AdminUsers
Chapter 2. Operations and Maintenance
12