Alcatel-Lucent OmniAccess 5740 - Inband Management (SSH and Telnet)

Management Plane Overview
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
47
Alcatel-Lucent
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Configuration Guide
INBAND MANAGEMENT (SSH AND TELNET)
SSH (SECURE SHELL)
Note: SSH is not supported in the no crypto image. For information on the no crypto
release, refer to the release note.
SSH is a program that enables logging into a remote machine, and provides
secure communication between two systems.
• Inbound SSH access to the system is disabled by default. It is mandatory to have
a user account configured for this. (See “AAA Configuration on OmniAccess 5740
USG”)
.
• Outbound SSH access is allowed for the user once the user has been
authenticated. SSH access from the system is always enabled.
Command (in CM) Description
ssh {enable|disable} Use this command to enable/disable the
SSH service.
ssh [vrf <vrf-name>] {<ip-
address>|<hostname>} <user-
name> [version {1|2}]
Use this command to access a remote
computer by SSH.
clear known_hosts [<ip-
address>]
This command enables you to clear the
address key mapping for all the IP
addresses/a single IP address from the
known_hosts file.
SSH client maintains a list of IP
addresses and associated RSA keys in
the file called known_hosts.
It is not possible to initiate a SSH
session with a host whose IP address
and key does not match with the one
stored in the known_hosts file. This
mismatch can happen if the an IP
address is assigned to a different host or
if the key of the host is regenerated. In
such cases, you have to clear the
known_host file before you can
successfully initiate the SSH client
session.
Also, the known_hosts file is not VRF
aware and is based only on the IP
address. Hence, it is required to clear
the file before you can establish a
session to the same IP address across
VRFs.