Digi IX10, Руководство пользователя

Страница: 418 / 874

Services Configure SSH access
IX10 User Guide 418
For example, to enable the diffie-helman-group-sha-14 key exchange algorithm:
i. Click Enable to enable SSH custom configuration.
ii. Leave Override disabled.
iii. For Configuration file , type the following:
KexAlgodiffie-hellman-group14-sha1
9. Click Apply to save the configuration and apply the change.

Command line
1. Select the device in Remote Manager and click Actions > Open Console , or log into the IX10
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Configure access control:
n
To limit access to specified IPv4 addresses and networks:
(config)> add service ssh acl address end value
(config)>
Where value can be:
l
A single IP address or host name.
l
A network designation in CIDR notation, for example, 192.168.1.0/24.
l
any : No limit to IPv4 addresses that can access the SSH service.
Repeat this step to list additional IP addresses or networks.
n
To limit access to specified IPv6 addresses and networks:
(config)> add service ssh acl address6 end value
(config)>
Where value can be:
l
A single IP address or host name.
l
A network designation in CIDR notation, for example, 2001:db8::/48.
l
any : No limit to IPv6 addresses that can access the SSH service.
Repeat this step to list additional IP addresses or networks.
n
To limit access to hosts connected through a specified interface on the IX10 device:
(config)> add service ssh acl interface end value
(config)>
Where value is an interface defined on your device.
Display a list of available interfaces: