Enable connection services on the router. SSH provides secure encrypted communications over an insecure network and is therefore useful for inband router management. Like all other types of network-based access, however, SSH access to the router is disabled by default in the JUNOS software. The following configuration enables SSH access and sets optional parameters that can be used to control the number of concurrent SSH sessions and the maximum number of SSH sessions that can be established in one minute. The rate-limit option can be useful in protecting against SYN flood denial-of-service (DoS) attacks on the SSH port.
- [edit]
- system {
-
- services {
- ssh connection-limit 10 rate-limit 4;
- }
- }