Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 275)

Multi-Service IronWare Security Configuration Guide 257
53-1003035-02
SSH server version 2 support
5
To start an SSH2 client connection to an SSH2 server using public key authentication, enter a
command such as the following:
Brocade# ssh 10.10.10.2 public-key dsa
Syntax: ssh [ipv6] [vrf vrf] ipv4-addr|ipv6-addr| host-name[port] [outgoing-interface
{ethernet|ve}][public-key {dsa|rsa}]
To make IPv6 connections to SSH server, use parameter [ipv6] followed by IPv6 address.
SSH requests will be initiated only from the ports belonging to the specified vrf.The default value
for vrf parameter is default-vrf.
The default value for port number is 22.
The parameter outgoing-interface {ethernet|ve} is applicable to IPv6 connections only.
To bring up public-key based client session, use the parameters [public-key {dsa|rsa}].
By default password based client session will be brought up.
Designating an interface as the outbound SSH session
You can designate a loopback interface, virtual interface, or Ethernet port as the outbound SSH
session.
To specify an IP address as a loopback interface, enter commands such as a the following.
Brocade(config)# int loopback 2
Brocade(config-lbif-2)# ip address 10.0.0.2/24
Brocade(config-lbif-2)# exit
Brocade(config)# ip ssh source-interface loopback 2
To specify an IP address as an Ethernet port, enter commands such as a the following.
Brocade(config)# interface ethernet 1/4
Brocade(config-if-e10000-1/4)# ip address 10.157.22.110/24
Brocade(config-if-e10000-1/4)# exit
Brocade(config)# ip ssh source-interface ethernet 1/4
Syntax: ip ssh source-interface ethernet slot/port | loopback num | ve num
The slot/port parameter specifies an ethernet port number.
The num parameter is a loopback interface or virtual interface number.
Ending an outbound SSH session
To clear an outbound SSH session, enter a command such as the following.
Brocade# kill ssh 17
Syntax: kill connection-id
Displaying SSH2 client information
For information about displaying SSH2 client information, see the following sections:
• “Displaying SSH server connection information”
• “Displaying SSH server connection information”