Security Commands
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
1012
the
access-profile
option. If the ACL policy file does not exist on the switch, the switch returns an
error message indicating that the file does not exist.
Use the
none
option to cancel a previously configured ACL.
Creating an ACL Policy File.
To create an ACL policy file, use the
edit policy
command. For more
information about creating and implementing ACL policy files, see
Chapter 13, “Policy Manager,”
and
Chapter 14, “Access Lists (ACLs),”
in the
ExtremeWare XOS Concepts Guide
.
If you attempt to implement a policy that does not exist on the switch, an error message similar to the
following appears:
Error: Policy /config/MyAccessProfile_2.pol does not exist on file system
If this occurs, make sure the policy you want to implement exists on the switch. To confirm the policies
on the switch, use the
ls
command. If the policy does not exist, create the ACL policy file.
Viewing SSH Information.
To view the status of SSH2 sessions on the switch, use the
show management
command. The
show management
command displays information about the switch including the
enable/disable state for SSH2 sessions and whether a valid key is present.
Example
The following command enables the SSH2 feature:
enable ssh2
The next example assumes you have already created an ACL to apply to SSH.
The following command applies the ACL MyAccessProfile_2 to SSH:
enable ssh2 access-profile MyAccessProfile_2
History
This command was first available in the ExtremeWare XOS 11.0 SSH module.
The
access-profile
and
none
options were added in ExtremeWare XOS 11.2.
Platform Availability
This command is available on all platforms.
