Ssh Server - Juniper MEDIA FLOW CONTROLLER 2.0.4 - ADMINISTRATOR S GUIDE AND CLI Administrator's Manual

Media Flow Controller Administrator's Guide

ssh server

Enable or disable, and configure SSH (secure sockets shell) server options.
ssh server
enable
host-key
generate
<key_type> {private-key <key> | public-key <key>}
listen [enable] [interface <interface_name>]
min-version {1 | 2}
ports <port> [<port2> ...]
x11-forwarding enable
Notes:
•
enable
disabled, the CLI is only accessible over the serial console; this does not terminate
existing SSH sessions; it only prevents new ones from being established.
•
host-key
•
generate
keys: RSAv1, RSAv2, and DSAv2. The system automatically generates the host keys
on its first boot, so this only needs to be done if a security breach is suspected and the
keys need to be changed.
•
<key type>
if changing) of the specified key type; options are rsa1, rsa2, and dsa2 and either
private-key
used with no key given, the user is prompted for the key. Entries made at this prompt
echo the asterisk (*) character, and the user must enter the same string twice.
•
listen
•
enable
SSHD. If enabled and at least one non-DHCP interface is specified in the list, the SSH
connections are only accepted on those specified interfaces. When disabled, SSH
connections are accepted on any interface.
•
interface <interface_name>
the interface is also running as a DHCP client, it is as if the interface was not added. If
DHCP is later turned off on this interface, it is as if the interface was then added to the
listen list. Use no ssh server listen interface <interface_name> to delete entries.
•
min-version
Default is 2. Use no ssh server min-version to reset to default.
•
ports
specified by repeating the <port> entry. There must be at least one port specified on the
system for the SSH server. Removes any previous ports if not listed in the command.
•
x11-forwarding enable
server. Default is disabled. X11 forwarding can provide a secure, encrypted link.
—Enable (default) or disable (with no) the SSH server. If the SSH server is
—Manipulate host keys for SSH:
—Regenerate new host keys for the SSH server. This generates three
—Manually set the host-key (either private or public, but should be both
or public-key . If the positive form of the private-key command is
—Configure SSH server interface access restrictions.
—Enable (default) or disable (with no) the listen interface-restricted list for
—Set the minimum version of the SSH protocol that the server supports.
—Specify on which ports the SSH server listens; default is 22. Multiple ports can be
—Enable or disable (with no) x11 forwarding for this SSH
Media Flow Controller CLI Commands
—Add interfaces to the listen list; default is eth0. If
ssh server 357