Ssh Server Deny-Users - Allied Telesis x310-26FT Command Reference Manual

S S (SSH) C
ECURE HELL OMMANDS
-
SSH SERVER DENY USERS

ssh server deny-users

Overview This command adds a username pattern to the deny list of the SSH server. If the
user of an incoming SSH session matches the pattern, the session is rejected.
SSH server also maintains the allow list. The server checks the user in the deny list
first. If a user is listed in the deny list, then the user access is denied even if the user
is listed in the allow list.
If a hostname pattern is specified, the user is denied from the hosts matching the
pattern.
The no variant of this command deletes a username pattern from the deny list of
the SSH server. To delete an entry from the deny list, the username and hostname
pattern should match exactly with the existing entry.
ssh server deny-users <username-pattern> [<hostname-pattern>]
Syntax
no ssh server deny-users <username-pattern>
[<hostname-pattern>]
Mode Global Configuration
To deny the user john to access SSH login from any host, use the commands:
Examples
awplus#
awplus(config)#
To deny the user john to access SSH login from a range of IP address (from
192.168.2.1 to 192.168.2.255), use the commands:
awplus#
awplus(config)#
To deny the user john to access SSH login from b-company.com domain, use
the commands:
awplus#
awplus(config)#
C613-50103-01 REV A
Parameter
<username-pattern> The username pattern that users can match to. The
<hostname-pattern> The host name pattern that hosts can match to. If specified,
configure terminal
ssh server deny-users john
configure terminal
ssh server deny-users john 192.168.2.*
configure terminal
ssh server deny-users john*.b-company.com
Command Reference for x310 Series
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
Description
username must begin with a letter. Valid characters are all
numbers, letters, and the underscore, hyphen, full stop and
asterisk symbols. An asterisk acts as a wildcard character
that matches any string of characters.
the server denies the user only when they connect from
hosts matching the pattern. An asterisk acts as a wildcard
character that matches any string of characters.
2433