topic Re: Securing remote access to ICX7450 running 9.0.10c in ICX Switches

Securing remote access to ICX7450 running 9.0.10c

frnkblk — Fri, 05 Aug 2022 15:37:21 GMT

I'd like to better secure remote access to the ICX7450. There doesn't seem to be away to apply an ACL to the SSH configuration, so I tried both the "all-client" and "ip ssh client" commands, but they don't seem to work in 9.0? Yet they are in the online manual?

SSH@router(config)#ip ssh client <redacted IP>
Invalid input ->client <redacted IP>
Type ? for a list
Node doesn't exist
SSH@router(config)#all-client <redacted IP>
Invalid input ->199.120.69.4
Type ? for a list
Node doesn't exist
SSH@router(config)#

Frank

Re: Securing remote access to ICX7450 running 9.0.10c

BenBeck — Fri, 05 Aug 2022 15:46:56 GMT

Hey @frnkblk

I think this is likely a documentation mistake. 9.x had a lot of command syntax changes. Here is the 9.x equivalent:

https://docs.commscope.com/bundle/fastiron-09010-commandref/page/GUID-48884BDF-310C-436E-A1FE-7713B2618CAF.html

Please let me know if you have any questions. I will forward on the documentation error.

Re: Securing remote access to ICX7450 running 9.0.10c

frnkblk — Fri, 05 Aug 2022 16:39:42 GMT

Thanks, that worked like a charm! It would be helpful if the documentation noted that when using this command there is an implicit "deny all" for everything else.

Also, can the 9.0 documentation be updated to remove "ip ssh client" and "all-client"?

Re: Securing remote access to ICX7450 running 9.0.10c

BenBeck — Fri, 05 Aug 2022 17:11:59 GMT

Hey @frnkblk

No problem. I did inform the documentation team and they will work to get it updated.