Advertisement
S
S
(SSH) C
ECURE
HELL
OMMANDS
-
SSH SERVER DENY
USERS
ssh server deny-users
Overview
This command adds a username pattern to the deny list of the SSH server. If the
user of an incoming SSH session matches the pattern, the session is rejected.
SSH server also maintains the allow list. The server checks the user in the deny list
first. If a user is listed in the deny list, then the user access is denied even if the user
is listed in the allow list.
If a hostname pattern is specified, the user is denied from the hosts matching the
pattern.
The no variant of this command deletes a username pattern from the deny list of
the SSH server. To delete an entry from the deny list, the username and hostname
pattern should match exactly with the existing entry.
ssh server deny-users <username-pattern> [<hostname-pattern>]
Syntax
no ssh server deny-users <username-pattern>
[<hostname-pattern>]
Mode
Global Configuration
To deny the user john to access SSH login from any host, use the commands:
Examples
awplus#
awplus(config)#
To deny the user john to access SSH login from a range of IP address (from
192.168.2.1 to 192.168.2.255), use the commands:
awplus#
awplus(config)#
To deny the user john to access SSH login from b-company.com domain, use
the commands:
awplus#
awplus(config)#
613-50137-01 Rev A
Parameter
<username-pattern> The username pattern that users can match to. The
<hostname-pattern> The host name pattern that hosts can match to. If specified,
configure terminal
ssh server deny-users john
configure terminal
ssh server deny-users john 192.168.2.*
configure terminal
ssh server deny-users john*.b-company.com
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.6-2.x
Description
username must begin with a letter. Valid characters are all
numbers, letters, and the underscore, hyphen, full stop and
asterisk symbols. An asterisk acts as a wildcard character
that matches any string of characters.
the server denies the user only when they connect from
hosts matching the pattern. An asterisk acts as a wildcard
character that matches any string of characters.
1635
Advertisement
Troubleshooting
