topic Re: Restrict SSH Access by ACL in ICX8200 (FastIron 10 (9?)) in ICX Switches

Restrict SSH Access by ACL in ICX8200 (FastIron 10 (9?))

ruckgscz — Thu, 27 Jul 2023 22:29:04 GMT

Hello,

For new installations we are moving to ICX8200 from 7150. In doing so, I have discovered our SSH ACL does not translate:

Before (ICX7150): ssh access-group MyFavoriteACL

I cannot find an equivalent command for ICX8200 (FastIron 10). And I don't see anything in the SSH sections of the management guide. CLI does show help for an SSH ACL command, not but no options are presented:

SSH@ICX8200-24P Router(config)#ssh ?
ssh Restrict ssh access by ACL

What is the SSH ACL command in 8200?

Thanks!

Re: Restrict SSH Access by ACL in ICX8200 (FastIron 10 (9?))

BenBeck — Thu, 27 Jul 2023 23:37:35 GMT

Hey @ruckgscz

There are quite a few changes in syntax from 8.x to 10.x. You can check the release notes, upgrade guide and command reference guides to get the full details, but there is quite a bit to review! There is not a pure 1-to-1 for everything, but you should be able to get to the same final result. You will likely want to look here:

https://docs.commscope.com/bundle/fastiron-10010-managementguide/page/GUID-C0579673-F39A-4E65-AA20-798C1AA81352.html

Let me know if that gets you to something usable.

Re: Restrict SSH Access by ACL in ICX8200 (FastIron 10 (9?))

ruckgscz — Wed, 02 Aug 2023 05:40:55 GMT

Thanks BenBeck, that "Restricting Remote Access " guide is exactly what I needed. I think my mistake was searching too much for ACL in FI 10, where the new command structure is not ACL in name.