Tip
This is the documentation for the 22.06 version. Looking for the documentation of the latest version? Have a look here.
Secure Shell (SSH) Server¶
The Secure Shell (SSH) service, sshd
, is always enabled in the host
namespace (Networking Namespaces) by default. The SSH service can also run
in the dataplane
namespace, and may be active in both namespaces at the same
time. The dataplane
namespace instance of SSH is configured using the ssh
dataplane (enable|disable)
command.
Warning
Though the SSH service is capable of running in the dataplane
namespace,
it should not be exposed to insecure networks. Brute force and other attacks
against SSH servers are common on the Internet, and exposing TNSR to such
attacks reduces its overall security. At a minimum, access to the service
should be restricted to specific remote hosts or networks by ACLs.
The best practice is to only run SSH in the host
namespace.
To enable the SSH service for the dataplane
namespace:
tnsr(config)# ssh dataplane enable
To disable the SSH service for the dataplane
namespace:
tnsr(config)# ssh dataplane disable
Control the SSH Service¶
The SSH service is controlled by the service ssh (host|dataplane)
(start|stop|restart|status)
command.
In most cases manual control of the service is unnecessary as the server will start and stop as needed based on the configuration.