2-19
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Chapter 2 Enabling Remote Access to the ACE
Terminating an Active User Session
Terminating an Active User Session
To terminate an active SSH or Telnet session for the active context, use one of the
following commands in Exec mode:
•
clear ssh
{
session_id
|
hosts
}
•
clear telnet
{
session_id
}
The arguments, keywords, and options are:
•
session_id
—Specifies the identifier of the SSH or Telnet session to
disconnect. You can obtain the specific
session_id
value using either the
show
ssh session-info
command or the
show telnet
command in Exec mode. See
the
“Directly Accessing a User Context Through SSH”
section for details.
•
hosts
—Clears the list of trusted SSH hosts from the ACE configuration.
For example, to terminate an SSH session, enter:
host1/Admin #
clear ssh 345
Enabling ICMP Messages to the ACE
By default, the ACE does not allow ICMP messages to be received by an ACE
interface or to pass through the ACE interface. ICMP is an important tool for
testing your network connectivity; however, network hackers can also use ICMP
to attack the ACE or your network. We recommend that you allow ICMP during
your initial testing, but then disallow it during normal operation.
To permit or deny address(es) to reach an ACE interface with ICMP messages,
either from a host to the ACE, or from the ACE to a host which requires the ICMP
reply to be allowed back, configure a:
•
Class map to provide the ICMP network traffic match criteria for the ACE.
•
Policy map to enable ICMP network management access to and from the
ACE.
•
Service policy to activate the policy map, attach the traffic policy to an
interface or globally on all interfaces, and specify the direction in which the
policy should be applied.
