sysconf ssh ip

Restrict the appliance/HSM administrative traffic (over SSH) to the indicated IP address (bound to one of the Luna Network HSM 7's Ethernet ports). Use this command where you need to segregate administrative traffic from client (NTLS) traffic. This command is an alternative to the command sysconf ssh device, which performs the same action by specifying an Ethernet device.

If you wish, SSH traffic restriction could complement client traffic restriction using the command ntls bind, which binds client (NTLS) traffic to a specific IP or device name on your Luna Network HSM 7.

User Privileges

Users with the following privileges can perform this command:

>Admin

>Operator

Syntax

sysconf ssh ip <ipaddress>

Argument(s)	Description
<ipaddress>	Specifies the IP address associated with the Luna Network HSM 7 network interface device to which you want to restrict the SSH service. Valid Values: >Any specific IPv4 or IPv6 address >0.0.0.0 (unrestricted IPv4) >:: (unrestricted IPv6)

Example

lunash:>sysconf ssh ip 192.20.11.78

Success:  SSH now restricted to ethernet device eth0 (IP address 192.20.11.78).
          Restarting ssh service.

Stopping sshd:                                             [  OK  ]

Starting sshd:                                             [  OK  ]


Command Result : 0 (Success)