ssh

This command enables the DataPower® SSH service.

Syntax

ssh address port

no ssh [address]

Parameters

address: Specifies the local IP address.
port: Identifies the local port that monitors for SSH traffic. The default value is 22.

Guidelines

SSH is disabled by default. You can use the optional arguments to explicitly bind SSH to a specific interface. If you explicitly bind SSH to an interface, you must have previously configured that interface.

In the absence of an explicit address assignment, SSH first attempts to bind to the management port. Without a configured management port, SSH binds to all configured interfaces.

You can compile an ACL to restrict access to SSH.

If the Ethernet for the local address supports IPv6 addresses, modify the ssh access control list to include an allow clauses for specific or all IPv6 addresses.

Use the no ssh command to disable SSH.

Examples

Enable SSH on port 22 (the default port) of the specified interface.
```
# ssh 10.10.13.4
SSH service listener enabled
```
Enable SSH on port 2200 of the specified interface.
```
# ssh 10.10.13.4 2200
SSH service listener enabled
```
Disable SSH on all interfaces, which restores the default state.
```
# no ssh
SSH service listener disabled
```