Services
Configure SSH access
IX14 User Guide
334
c. For
Address
, enter the IPv6 address or network that can access the device's SSH
service. Allowed values are:
l
A single IP address or host name.
l
A network designation in CIDR notation, for example, 2001:db8::/48.
l
any
: No limit to IPv6 addresses that can access the SSH service.
d. Click
again to list additional IP addresses or networks.
n
To limit access to hosts connected through a specified interface on the IX14 device:
a. Click
Interfaces
.
b. For
Add Interface
, click
.
c. For
Interface
, select the appropriate interface from the dropdown.
d. Click
again to allow access through additional interfaces.
n
To limit access based on firewall zones:
a. Click
Zones
.
b. For
Add Zone
, click
.
c. For
Zone
, select the appropriate firewall zone from the dropdown.
See
for information about firewall zones.
d. Click
again to allow access through additional firewall zones.
6. Multicast DNS (mDNS) is enabled by default. mDNS is a protocol that resolves host names in
small networks that do not have a DNS server. To disable mDNS, or enable it if it has been
disabled, click
Enable mDNS
.
7. For
Private key
, type the private key in PEM format. If
Private key
is blank, the device will use
an automatically-generated key.
8. To create custom SSH configuration settings:
a. Click to expand
Custom configuration
.
b. Click
Enable
.
c. For
Override
:
n
If
Override
is enabled, entries in
Configuration file
will be used in place of the
standard SSH configuration.
n
If
Override
is not enabled, entries in
Configuration file
will be added to the
standard SSH configuration.
d. For
Configuration file
, type configuration settings in the form of an OpenSSH sshd_config
file.
For example, to enable the diffie-helman-group-sha-14 key exchange algorithm:
i. Click
Enable
to enable SSH custom configuration.
ii. Leave
Override
disabled.
iii. For
Configuration file
, type the following:
KexAlgodiffie-hellman-group14-sha1
9. Click
Apply
to save the configuration and apply the change.
