[Contents] [Prev] [Next] [Index] [Report an Error]

NETCONF Service over SSH Is Enabled

The IETF draft titled Using the NETCONF Configuration Protocol over Secure Shell (SSH) requires that the NETCONF server by default provide SSH access to client machines over a devoted Transmission Control Protocol (TCP) port, to make it easy to identify and filter NETCONF traffic. The port for the JUNOS NETCONF server is 32000. In addition, you can enable client applications to access the NETCONF server over the default SSH port (22). (For more information about the IETF draft, see Generating Well-Formed XML Documents.)

Perform the following steps:

Include one or both of the following statements at the indicated hierarchy level:

To enable SSH access over the devoted port (32000) as specified by the IETF specification, include the ssh statement at the [edit system services netconf] hierarchy level:[edit system login user account-name authentication] user@host# top [edit] user@host# set system services netconf ssh

To enable access over the default SSH port (22), include the ssh statement at the [edit system services] hierarchy level. This configuration also enables SSH access to the routing platform for all users and applications.[edit] user@host# set system services ssh
Commit the configuration:[edit] user@host# commit
Repeat the preceding steps on each routing platform where the client application establishes NETCONF sessions.

[Contents] [Prev] [Next] [Index] [Report an Error]