Digi IX20, Руководство пользователя

Страница: 372 / 726

Services Configure SSH access
IX20 User Guide 372
6. Multicast DNS (mDNS) is enabled by default. mDNS is a protocol that resolves host names in
small networks that do not have a DNS server. To disable mDNS, or enable it if it has been
disabled, click
Enable mDNS .
7. For Private key , type the private key in PEM format. If Private key is blank, the device will use
an automatically-generated key.
8. Click Apply to save the configuration and apply the change.

Command line
1. Log into the IX20 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Configure access control:
n
To limit access to specified IPv4 addresses and networks:
(config)> add service ssh acl address end value
(config)>
Where value can be:
l
A single IP address or host name.
l
A network designation in CIDR notation, for example, 192.168.1.0/24.
l
any : No limit to IPv4 addresses that can access the SSH service.
Repeat this step to list additional IP addresses or networks.
n
To limit access to specified IPv6 addresses and networks:
(config)> add service ssh acl address6 end value
(config)>
Where value can be:
l
A single IP address or host name.
l
A network designation in CIDR notation, for example, 2001:db8::/48.
l
any : No limit to IPv6 addresses that can access the SSH service.
Repeat this step to list additional IP addresses or networks.
n
To limit access to hosts connected through a specified interface on the IX20 device:
(config)> add service ssh acl interface end value
(config)>