Prerequisites For Outbound Ssh Connections - Juniper JUNOS OS 10.3 - XML MANAGEMENT PROTOCOL GUIDE 6-30-2010 Manual

Copyright © 2010, Juniper Networks, Inc.
b. Enable the application to access the public and private keys. One method is to
run the
ssh-agent
c. On the device running Junos OS that needs to accept SSH connections from
Junos XML protocol client applications, associate the public key with the Junos
login account by including the
user account-name authentication]
level:
[edit]
user@host# edit system login user account-name authentication
Issue the following command to copy the contents of the specified file onto the
device running Junos OS:
[edit system login user account-name authentication]
user@host# set load-key-file URL
is the path to the file that contains one or more public keys. The
URL
command by default stores each public key in a file in the
the user home directory; the filename depends on the encoding (DSA or RSA)
and SSH version. For information about specifying URLs, see the Junos CLI User
Guide.
Alternatively, you can include one or both of the
at the
[edit system login user account-name authentication]
recommend using the
the need to type or cut and paste the public key on the command line. For more
information about the
Basics Configuration Guide.
Configure the device running Junos OS to accept SSH connections by including the
4.
statement at the
ssh [edit system services]
enables SSH access for all users and applications, not just Junos XML protocol
client applications.
[edit system login user account-name authentication]
user@host# top
[edit]
user@host# set system services ssh
Commit the configuration:
5.
[edit]
user@host# commit
Repeat Step 1 on each computer where the application runs, and Step 2 through
6.
Step 5 on each device to which the application connects.

Prerequisites for Outbound SSH Connections

The outbound SSH feature allows the initiation of an SSH session between devices
running Junos OS and Network and System Management servers where client-initiated
TCP/IP connections are blocked (for example, when the device is behind a firewall). To
configure outbound SSH, you add an
Once configured and committed, the device running Junos OS will begin to initiate
Chapter 3: Controlling the Junos XML Management Protocol Session
program on the computer where the application runs.
load-key-file statement at the
hierarchy level. First, move to that hierarchy
statement, however, because it eliminates
load-key-file
ssh-dsa and ssh-rsa statements, see the Junos System
hierarchy level. This statement
configuration statement to the device.
outbound-ssh
[edit system login
ssh-keygen
.ssh subdirectory of
ssh-dsa and ssh-rsa statements
hierarchy level. We
31