Table of Contents
Advertisement
Services
For example, to enable the diffie-helman-group-sha-14 key exchange algorithm:
i. Click Enable to enable SSH custom configuration.
ii. Leave Override disabled.
iii. For Configuration file, type the following:
KexAlgorithms +diffie-hellman-group14-sha1
9. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX10
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Configure access control:
To limit access to specified IPv4 addresses and networks:
n
(config)> add service ssh acl address end value
(config)>
Where value can be:
l
l
l
Repeat this step to list additional IP addresses or networks.
To limit access to specified IPv6 addresses and networks:
n
(config)> add service ssh acl address6 end value
(config)>
Where value can be:
l
l
l
Repeat this step to list additional IP addresses or networks.
To limit access to hosts connected through a specified interface on the IX10 device:
n
(config)> add service ssh acl interface end value
(config)>
Where value is an interface defined on your device.
IX10 User Guide
A single IP address or host name.
A network designation in CIDR notation, for example, 192.168.1.0/24.
any: No limit to IPv4 addresses that can access the SSH service.
A single IP address or host name.
A network designation in CIDR notation, for example, 2001:db8::/48.
any: No limit to IPv6 addresses that can access the SSH service.
Display a list of available interfaces:
Configure SSH access
418
Advertisement
Table of Contents
