Netgear XCM8810 Chassis Hardware Installation Guide - Page 636

NETGEAR 8800 Chassis Switch CLI Manual enable ssh2 enable ssh2 {access-profile [ | none]} {port } {vr [ | all | default]} Description Enables SSH2 server to accept incoming sessions from SSH2 clients. Syntax Description access_profile none port vr_name all default Specifies an ACL policy. Cancels a previously configured ACL policy. Specifies a TCP port number. The default is port 22. Specifies a virtual router name. Note: User-created VRs are supported only on the platforms listed for this feature in Appendix A in the NETGEAR 8800 User Manual. Specifies that SSH is enabled on all virtual routers. Specifies that SSH is enabled on the default virtual router. Default The SSH2 feature is disabled by default. Usage Guidelines SSH2 enables the encryption of session data. You must be logged in as an administrator to enable SSH2. Before you use SSH2, you must generate a host key and enable SSH2. To generate an SSH2 host key, use the configure ssh2 key command. To enable SSH2, use the enable ssh2 command. Use the port option to specify a TCP port number other than the default port of 22. You can only specify ports 22 and 1024 through 65535. Using ACLs to Control SSH Access You can specify a list of predefined clients that are allowed SSH2 access to the switch. To do this, you configure an ACL policy to permit or deny a specific list of IP addresses and subnet masks for the SSH port. You must create an ACL policy file before you can use the access-profile option. If the ACL policy file does not exist on the switch, the switch returns an error message indicating that the file does not exist. Use the none option to cancel a previously configured ACL. 636 | Chapter 15. Security Commands