Secure Shell to Front End Interfaces

Asset ID:	1-71-1598566.1
Update Date:	2017-05-09
Keywords:

Solution Type Technical Instruction Sure

Solution 1598566.1 : Secure Shell to Front End Interfaces

Applies to:

Acme Packet 3820 - Version E-Cx6.4.0 and later
Acme Packet 4500 - Version S-Cx6.3.0 and later
Acme Packet 6300 - Version S-Cz7.1.2 and later
Net-Net OS - Version S-Cx6.3.0 and later
Acme Packet OS

Goal

SSH to Front End Interfaces

Solution

In order to connect to Front End Interfaces by SSH, it is necessary to generate an access-list about opening the port 22, which is closed by default.

In order to allow SD to check the incoming packets as per destination IP AND destination port then set a secure way to connect Front End Interface. The only important point is that the Source and Destination IP need to be in the same network range.

access-control realm-id realm-name of the SIP Interface that the destination IP belongs to.

source-address Source IP Address that will connect to Front End Interface by SSH

destination-address Dest-IP-Address:Dest-IP-Port(22)

application-protocol NONE

So that Dest-IP-Address and Dest-IP-Port(22) are checked together

transport-protocol ALL

You can keep it as ALL

access permit

So that you open this

Dest-IP-Port average-rate-limit 0

trust-level high

No Blockage any more at destination

minimum-reserved-bandwidth 0

invalid-signal-threshold 0

maximum-signal-threshold 0

untrusted-signal-threshold 0

deny-period 30

last-modified-by admin@console

last-modified-date 2009-01-27 02:03:01

Attachments

This solution has no attachment