User Manual

In order to enable the SSH server, the host key must be created in advance (ssh-server host key generate).
If this command is executed with the "no" syntax, disable the SSH server.
[Note]
In order to log in from the SSH client, the user name and password must be registered in advance (username).
[Example]
Start the SSH server with 12345 as the listening port number.
SWR2310#ssh-server host key generate
SWR2310#configure terminal
SWR2310(config)#ssh-server enable 12345
4.17.2 Show SSH server settings
[Syntax]
show ssh-server
[Input mode]
privileged EXEC mode
[Description]
Shows the settings of the SSH server.
The following items are shown.
• SSH server function enabled/disabled status
• Listening port number
• Whether SSH server host key exists
• VLAN interface permitted to access the SSH server
• Filter that controls access to the SSH server
[Example]
Show the settings of the SSH server.
SWR2310#show ssh-server
Service:Enable
Port:23
Hostkey:Generated
Management interface(vlan): 1
Interface(vlan):1, 2, 3
Access:
deny 192.168.100.5
permit 192.168.100.0/24
4.17.3 Set host that can access the SSH server
[Syntax]
ssh-server interface ifname
no ssh-server interface ifname
[Parameter]
ifname : VLAN interface name
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Sets the VLAN interface that allows access to the SSH server.
If this command is executed with the "no" syntax, delete the specified interface.
Up to eight instances of this command can be set, and those that are specified earlier take priority for application.
If this command is not set, access is permitted only from the maintenance VLAN.
78 | Command Reference | Maintenance and operation functions