Configuring the SSH Access

Overview

SSH (Secure Shell) is an encryption network protocol, which can perform secure access and file transmission in the unsecured network. It performs data exchange through a secure channel, which is established based on TCP. The default port is 22, which can be changed as required for security purposes.

Procedure

By default, the SSH service is enabled. You can log in switch through SSH protocol by directly access eth0. Besides, if you want to remotely log in and manage the switch through the Layer 3 interface, you should configure as follows:

Step1 In the configuration mode, specify the loopback interface, VLAN interface or routed interface as the inband management port, both management traffic and data plane traffic can be transmitted through the specified interface. The specified interface should be in the default VRF.

set system inband {loopback <ip-address> \| vlan-interface <vlan-interface-name> \| routed-interface <routed-interface-name>}

set system inband {loopback <ip-address> \| vlan-interface <vlan-interface-name> \| routed-interface <routed-interface-name>}

Step2 (Optional) Set the limit number of SSH connections.

set system services ssh connection-limit <int> connection-limit <int>: specifies the maximum number of allowed connections, the valid number ranges 0-250. Default value is 0, which removes the connection limit.

set system services ssh connection-limit <int> connection-limit <int>: specifies the maximum number of allowed connections, the valid number ranges 0-250. Default value is 0, which removes the connection limit.

Step3 (Optional) Specify the listening port number of SSH server.

set system services ssh port <port-number> port <port-number>: specifies the listening port number of the SSH server. The value is an integer ranging from 1 to 65535. Th default value is 22.

set system services ssh port <port-number> port <port-number>: specifies the listening port number of the SSH server. The value is an integer ranging from 1 to 65535. Th default value is 22.

Step4 Commit the configuration.

commit

commit

Verifying the Configuration

After the configuration is completed, use ssh admin@<ip-address> -p <port> to check whether the switch can be accessed through SSH.

Other Configurations

To disable the SSH service, use set system services ssh disable true command.

To delete the SSH configuration, use delete system services ssh command.