sshcfg -T system:mm[x] <-cstatus (enabled | disabled)> <-hk (rsd | dsa | gen)> <-v1 (on | off)>
Command supported by Junos OS Release 9.1 and later.
(JCS1200 platform only) Display or configure SSH access on the JCS management module.
-T system:mm[x]—Specify the JCS management module as the target of the command. Replace x with a value of 1 or 2.
-cstatus (enabled | disabled)—(Optional) Enable or disable the SSH server on the JCS management module.
-hk gen—(Optional) Generate a host key for the JCS management module.
-hk (rsa | dsa)—(Optional) Display RSA or DSA host key information for the JCS management module.
-v1 (on | off)—(Optional) Enable or disable SSH v1 on the JCS management module. (SSH v2 is always enabled.)
operator (display)
supervisor (display or configure)
Table 1 lists the output fields for the sshcfg command. Output fields are listed in the approximate order in which they appear.
Table 1: sshcfg Output Fields
Field Name | Field Description |
|---|---|
v1 | SSH v1 status (On or Off). SSH v2 is always enabled (On). |
cstatus | Status of the CLI SSH server (enabled or disabled). |
CLI SSH port | Port number assigned to the CLI SSH server. |
sstatus | Status of the SMASH (secure mashup) SSH server (enabled or disabled). |
SMASH SSH port | Port number assigned to the SMASH SSH server. |
ssh-dss | DSS fingerprint for the SSH server. This fingerprint is used to verify the authenticity of the server. |
ssh-rsa | RSA fingerprint for the SSH server. This fingerprint is used to verify the authenticity of the server. |
x SSH public keys | Number of SSH public keys installed. |
x Locations | Number of locations available to store SSH public keys. |
sshcfg (Display)
system> sshcfg -T system:mm[1]-v1 off -cstatus enabled CLI SSH port 22 -sstatus disabled SMASH SSH port 50024 ssh-dss 2048 bit fingerprint: 27:ee:bd:a9:27:28:d8:a5:93:03:3d:8e:77:d0:38:2c ssh-rsa 2048 bit fingerprint: 66:c9:73:4f:18:11:02:10:f3:05:6e:d7:27:05:a5:01 2 SSH public keys installed 10 locations available to store SSH public keys
sshcfg (Configure)
system> sshcfg -T system:mm[1] -hk gen -cstatus
enabledOK