Allied Telesis AT-IX5-28GPX, Manual

Page: 1296 / 1928

1278 Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch C613-50057-01 REV A
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
S
ECURE
S
HELL
(SSH) C
OMMANDS
SSH SERVER DENY
-
USERS
ssh server deny-users
Overview This command adds a username pattern to the deny list of the SSH server. If the
user of an incoming SSH session matches the pattern, the session is rejected.
SSH server also maintains the allow list. The server checks the user in the deny list
first. If a user is listed in the deny list, then the user access is denied even if the user
is listed in the allow list.
If a hostname pattern is specified, the user is denied from the hosts matching the
pattern.
The no variant of this command deletes a username pattern from the deny list of
the SSH server. To delete an entry from the deny list, the username and hostname
pattern should match exactly with the existing entry.
Syntax
ssh server deny-users < username-pattern > [< hostname-pattern >]
no ssh server deny-users < username-pattern >
[< hostname-pattern >]
Mode Global Configuration
Examples To deny the user
john
to access SSH login from any host, use the commands:
awplus# configure terminal
awplus(config)# ssh server deny-users john
To deny the user john to access SSH login from a range of IP address (from
192.168.2.1 to 192.168.2.255), use the commands:
awplus# configure terminal
awplus(config)# ssh server deny-users john 192.168.2.*
To deny the user
john
to access SSH login from
b-company.com
domain, use
the commands:
awplus# configure terminal
awplus(config)# ssh server deny-users john*.b-company.com
Parameter Description
<username-pattern>
The username pattern that users can match to. The
username must begin with a letter. Valid characters are all
numbers, letters, and the underscore, hyphen, full stop and
asterisk symbols. An asterisk acts as a wildcard character
that matches any string of characters.
<hostname-pattern>
The host name pattern that hosts can match to. If specified,
the server denies the user only when they connect from
hosts matching the pattern. An asterisk acts as a wildcard
character that matches any string of characters.