Juniper JUNOS OS 10.3 - XML MANAGEMENT PROTOCOL GUIDE 6-30-2010 Manual page 56

Junos 10.3 Junos XML Management Protocol Guide
34
– Number of times the device running Junos OS attempts to establish
retry number
an outbound SSH connection before gving up. The default is three tries.
timeout seconds —Amount of time, in seconds, that the device running Junos OS
attempts to establish an outbound SSH connection before giving up. The default
is 15 seconds.
Commit the configuration:
6.
[edit]
user@host# commit
To set up the configuration management server:
Satisfy the prerequisites discussed in "Prerequisites for All Access Protocols" on
1.
page 27.
Enable the application to access the SSH software.
2.
If the application uses the Junos XML protocol Perl module provided by Juniper
Networks, no action is necessary. As part of the installation procedure for the Perl
module, you install a prerequisites package that includes the necessary
SSH software. For instructions, see "Downloading the Junos XML Protocol Perl
Client and Prerequisites Package" on page 206.
If the application does not use the Junos XML protocol Perl module, obtain the
SSH software and install it on the computer where the application runs. For
information about obtaining and installing SSH software, see
and
http://www.openssh.com/
(Optional) Manually install the device's public key for use with the SSH connection.
3.
Configure the client system to receive and process initialization broadcast requests.
4.
The intialization requests use the following syntax:
If the secret attribute is configured, the device running Junos OS will send its public
SSH key along with the intialization sequence (recommended method). When the
key has been received, the client needs to determine what to do with the device's
public key. We recommend that you replace any current public SSH key for the
device with the new key. This ensures that the client always has the current key
available for authentication.
MSG-ID: DEVICE-CONN-INFO\r\n
MSG-VER: V1\r\n
DEVICE-ID: <device-id>\r\n
HOST-KEY: <pub-host-key>\r\n
HMAC: <HMAC(pub-SSH-host-key, <secret>)>\r\n
If the secret attribute is not configured, the device does not send its public SSH
key along with the initialization sequence. You need to manually install the current
public SSH key for the device.
MSG-ID: DEVICE-CONN-INFO\r\n
MSG-VER: V1\r\n
DEVICE-ID: <device-id>\r\n
.
Copyright © 2010, Juniper Networks, Inc.
http://www.ssh.com/