7.6.1.0 - Force10 Networks

To apply a MAC ACL on a VTY line, use the same access-class command as IP ACLs (Figure 61).
Figure 61 Example Access Class Configuration Using TACACS+ Without Prompt
Force10(conf)#mac access-list standard sourcemac
Force10(config-std-mac)#permit 00:00:5e:00:01:01
Force10(config-std-mac)#deny any
Force10(conf)#
Force10(conf)#line vty 0 9
Force10(config-line-vty)#access-class sourcemac
Force10(config-line-vty)#end
SCP and SSH
Secure Shell (SSH) is a protocol for secure remote login and other secure network services over an
insecure network. FTOS is compatible with SSH versions 1.5 and 2, both the client and server modes. SSH
sessions are encrypted and use authentication. For details on command syntax, see the Security chapter in
the FTOS Command Line Interface Reference.
SCP is a remote file copy program that works with SSH and is supported by FTOS.
To use the SSH client, use the following command in the EXEC privilege mode:
Command Syntax Command Mode Purpose
ssh {hostname} [-l username |
-p port-number | -v {1 | 2}
EXEC privilege Open an SSH connection specifying the hostname,
username, port number, and version of the SSH
client.
hostname is the IP address or hostname of the
remote device.
• Enter an IPv4 address in dotted decimal format
(A.B.C.D),
• Enter an IPv6 address in hexadecimal format
(0000:0000:0000:0000:0000:0000:0000:0000).
Elision of zeros is supported.
To enable the SSH server for version 1 and 2, use the following command in the CONFIGURATION
mode:
Command Syntax Command Mode Purpose
ip ssh server {enable | port
port-number }
CONFIGURATION To configure the E-Series as an SCP/SSH
server, use this command.
126 Security