Configuring Remote Network Management Traffic Services - Cisco 4700M Administration Manual

Enabling Remote Access to the ACE
host1/Admin(config-pmap-mgmt)# exit
host1/Admin(config)#
Attach the traffic policy to a single VLAN interface or globally to all VLAN interfaces in the same
Step 5
context. For example, to specify an interface VLAN and apply the remote management policy map to
the VLAN, enter:
host1/Admin(config)# interface vlan 50
host1/Admin(config-if)# ip address 172.16.1.100 255.255.0.0
host1/Admin(config-if)# service-policy input REMOTE_MGMT_ALLOW_POLICY
host1/Admin(config-if)# exit
(Optional) Configure the maximum number of Telnet sessions allowed for each context.
Step 6
host1/Admin(config)# telnet maxsessions 3
(Optional) Configure the maximum number of SSH sessions allowed for each context.
Step 7
host1/Admin(config)# ssh maxsessions 3
If you have global administrator privileges, use the ssh key command to generate the SSH private key
Step 8
and the corresponding public key for use by the SSH server. There is only one host-key pair. For
example, to generate an RSA1 key pair in the Admin context, enter:
host1/Admin(config)# ssh key rsa1 1024
generating rsa1 key
.....
generated rsa1 key
(Optional) Save your configuration changes to Flash memory.
Step 9
host1/Admin(config)# exit
host1/Admin# copy running-config startup-config
(Optional) Terminate an active SSH or Telnet session for the active context by using one of the following
Step 10
commands in Exec mode:
•
•
host1/Admin# clear ssh 345

Configuring Remote Network Management Traffic Services

This section provides an overview on creating a class map, policy map, and service policy for remote
network access to the ACE. The following items summarize the role of each function in configuring
remote network management access to the ACE:
•
•
•
Cisco 4700 Series Application Control Engine Appliance Administration Guide
2-4
clear ssh {session_id | hosts}
clear telnet session_id
Class map—Provides the remote network traffic match criteria to permit traffic based on:
Remote access network management protocols (SSH, Telnet, or ICMP)
–
Client source IP address
–
Policy map—Enables remote network management access for a traffic classification that matches
the criteria listed in the class map.
Service policy—Activates the policy map and attaches the traffic policy to an interface or globally
on all interfaces.
Chapter 2 Enabling Remote Access to the ACE
OL-20823-01