|
Home > |
|---|
Set the SSH local-IP restriction policy.
This command restricts appliance/HSM administrative traffic (over SSH) to only the indicated IP address (bound to one of the Luna SA's Ethernet ports). Use this where you need to segregate administrative traffic from client (NTLS) traffic. This command is an alternative to the command "sysconf ssh device", which performs the same action by specifying an Ethernet device.
If you wish, SSH traffic restriction could complement client traffic restriction using the command "ntls bind", which binds client (NTLS) traffic to a specific IP or device name on your Luna SA.
sysconf ssh ip <ipaddress>
| Parameter | Shortcut | Description |
|---|---|---|
| <ipaddress> |
Specifies the IP address associated with the Luna SA network interface device to which you want to restrict the SSH service. Valid values: Any ipv4 address. |
lunash:>sysconf ssh ip 192.20.10.200
Success: SSH now restricted to ethernet device eth0 (ip address 192.20.10.200).
Restarting ssh service.
Stopping sshd: [ OK ]
Starting sshd: [ OK ]
Command Result : 0 (Success)