Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 72 / 1193

System Configuration and Monitoring
Left running head:
Chapter name (automatic)
46
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
I
NBAND
M
ANAGEMENT
( SSH
AND
T
ELNET
)
SSH (S
ECURE
S
HELL
)
Note: SSH is not supported in the no crypto image. For information on the no crypto
release, refer to the release note.
SSH is a program that enables logging into a remote machine, and provides
secure communication between two systems.
•
Inbound SSH access to the system is disabled by default. It is mandatory to have
a user account configured for this. (See
“AAA Configuration on OA-700” on
page 58 )
.
•
Outbound SSH access is allowed for the user once the user has been
authenticated. SSH access from the system is always enabled.
Command (in UM) Description
ssh { enable | disable }
Use this command to enable/disable the
SSH service.
ssh [ vrf <vrf-name> ] {< ip-
address> | <hostname> } < user-
name > [ version { 1 | 2 }]
Use this command to access a remote
computer by SSH.
clear known_hosts [< ip-
address> ]
This command enables you to clear the
address key mapping for all the IP
addresses/a single IP address from the
known_hosts file.
SSH client maintains a list of IP
addresses and associated RSA keys in
the file called known_hosts.
It is not possible to initiate a SSH
session with a host whose IP address
and key does not match with the one
stored in the known_hosts file. This
mismatch can happen if the an IP
address is assigned to a different host or
if the key of the host is regenerated. In
such cases, you have to clear the
known_host file before you can
succesfully initiate the SSH client
session.
Also, the known_hosts file is not VRF
aware and is based only on the IP
address. Hence, it is required to clear
the file before you can establish a
session to the same IP address across
VRFs.