enable ssh2
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
1011
enable ssh2
enable ssh2 {access-profile [<access_profile> | none]} {port
<tcp_port_number>} {vr [<vr_name> | all | default]}
Description
Enables SSH2 server to accept incoming sessions from SSH2 clients.
Syntax Description
Default
The SSH2 feature is disabled by default.
Usage Guidelines
NOTE
The BlackDiamond 8800 series switch and the Summit X450 family of switches do not support user-created VRs.
SSH2 enables the encryption of session data. You must be logged in as an administrator to enable SSH2.
SSH2 functionality is not present in the base ExtremeWare XOS software image, but is in an additional,
installable module. Before you can access any SSH2 commands, you must install the module. Without
the module, the commands do not appear on the command line. To install the module, see the
instructions in
Appendix A, “Software Upgrade and Boot Options.”
After you have installed the SSH2 module, you must generate a host key and enable SSH2. To generate
an SSH2 host key, use the
configure ssh2 key
command. To enable SSH2, use the
enable ssh2
command.
Use the
port
option to specify a TCP port number other than the default port of 22. You can only
specify ports 22 and 1024 through 65535.
Using ACLs to Control SSH Access.
You can specify a list of predefined clients that are allowed SSH2
access to the switch. To do this, you configure an ACL policy to permit or deny a specific list of IP
addresses and subnet masks for the SSH port. You must create an ACL policy file before you can use
access_profile
Specifies an ACL policy.
none
Cancels a previously configured ACL policy.
port
Specifies a TCP port number. The default is port 22.
vr_name
Specifies a virtual router name.
NOTE: The BlackDiamond 8800 series switch and the Summit X450 family of
switches do not support user-created VRs.
all
Specifies that SSH is enabled on all virtual routers.
default
Specifies that SSH is enabled on the default virtual router.
