Table of Contents
Advertisement
Command Reference Guide
ip access-class <ipv4 acl name> in
Use the ip access-class in command to restrict Internet Protocol version 4 (IPv4) secure shell (SSH) access
using a configured access control list (ACL). Received IPv4 packets passed by the ACL will be allowed.
Use the ACL configuration to deny hosts or entire networks or to permit specified IPv4 addresses. Use the
no form of this command to disable this feature. Refer to
984
and
ip access-list extended <ipv4 acl name> on page 982
ACLs. Variations of this command include:
ip access-class <ipv4 acl name> in
ip access-class <ipv4 acl name> in any-vrf
Syntax Description
<ipv4 acl name>
any-vrf
Default Values
By default, there are no configured IPv4 ACLs associated with SSH sessions.
Command History
Release 11.1
Release 16.1
Release 18.2
Release R10.1.0
Functional Notes
When using the ip access-class in command to associate an ACL with an SSH session, remember to
duplicate the ip access-class in command for all configured SSH sessions 0 through 4. SSH access to
the unit using a specific SSH session is not possible. Users will be assigned the first available SSH
session.
VRF on AOS products allows a single physical router to be partitioned into multiple virtual routers. Each
router instance has its own route table and interface assignments. Beginning with Release 16.1, all AOS
routers supporting multiple VRF instances (multi-VRF) have an unnamed default VRF instance regardless
of whether multi-VRF is configured.
60000CRG0-35E
Identifies the configured IPv4 ACL using an alphanumeric descriptor (all
ACL descriptors are case sensitive).
Optional. Allows incoming connections from any VPN routing and
forwarding (VRF) instance based on the parameters set in the access class
list. Without this keyword, the ACL only applies to the default VRF and all
Telnet/SSH connections on nondefault VRFs will be ignored.
Command was introduced.
Command was expanded to include the vrf parameter.
Command was changed to include the ip parameter to accommodate
Internet Protocol version 6 (IPv6) support for ADTRAN internetworking
products only.
Command was changed to include the ip parameter to accommodate
Internet Protocol version 6 (IPv6) support for ADTRAN voice products.
Copyright © 2012 ADTRAN, Inc.
Line (SSH) Interface Command Set
ip access-list standard <ipv4 acl name> on page
for more information about configuring
1487
Advertisement
Table of Contents
