Allied Telesis AT-IX5-28GPX, Manual

Page: 1292 / 1928

1274 Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch C613-50057-01 REV A
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
S
ECURE
S
HELL
(SSH) C
OMMANDS
SSH SERVER ALLOW
-
USERS
ssh server allow-users
Overview This command adds a username pattern to the allow list of the SSH server. If the
user of an incoming SSH session matches the pattern, the session is accepted.
When there are no registered users in the server’s database of allowed users, the
SSH server does not accept SSH sessions even when enabled.
SSH server also maintains the deny list. The server checks the user in the deny list
first. If a user is listed in the deny list, then the user access is denied even if the user
is listed in the allow list.
The no variant of this command deletes a username pattern from the allow list of
the SSH server. To delete an entry from the allow list, the username and hostname
pattern should match exactly with the existing entry.
Syntax
ssh server allow-users < username-pattern > [< hostname-pattern >]
no ssh server allow-users < username-pattern >
[< hostname-pattern >]
Mode Global Configuration
Examples To allow the user
john
to create an SSH session from any host, use the commands:
awplus# configure terminal
awplus(config)# ssh server allow-users john
To allow the user
john
to create an SSH session from a range of IP address (from
192.168.1.1 to 192.168.1.255), use the commands:
awplus# configure terminal
awplus(config)# ssh server allow-users john 192.168.1.*
To allow the user
john
to create a SSH session from
a-company.com
domain,
use the commands:
awplus# configure terminal
awplus(config)# ssh server allow-users john *.a-company.com
Parameter Description
<username-pattern>
The username pattern that users can match to. An asterisk
acts as a wildcard character that matches any string of
characters.
< hostname-pattern >
The host name pattern that hosts can match to. If specified,
the server allows the user to connect only from hosts
matching the pattern. An asterisk acts as a wildcard
character that matches any string of characters.