Secure Shell Commands
©2008 Allied Telesis Inc. All rights reserved.
Software Version 5.2.1
AlliedWare Plus
TM
Operating System Software Reference C613-50003-00 REV E
45.27
ssh server allow-users
This command adds a username pattern to the allow list of the SSH server. If the user of an
incoming SSH session matches the pattern, the session is accepted.
When there are no registered users in the server’s database of allowed users, the SSH server
does not accept SSH sessions even when enabled.
SSH server also maintains the deny list. The server checks the user in the deny list first. If a user
is listed in the deny list, then the user access is denied even if the user is listed in the allow list.
The no form deletes a username pattern from the allow list of the SSH server. To delete an
entry from the allow list, the username and hostname pattern should match exactly with the
existing entry.
Syntax
ssh server allow-users
<username_pattern>
[
<hostname_pattern>
]
no ssh server allow-users
<username_pattern>
[
<hostname_pattern>
]
Mode
Configure mode
Example
To allow the user “john” to create an SSH session from any host, use the command:
awplus(config)#
ssh server allow-users john
To allow the user “john” to create an SSH session from a range of IP address (from 192.168.1.1
to 192.168.1.255), use the command:
awplus(config)#
ssh server allow-users john 192.168.1.*
To allow the user “john” to create a SSH session from a-company.com domain, use the
command:
awplus(config)#
ssh server allow-users john *.a-company.com
To delete the existing user entry "john 192.168.1.*" in the allow list, use the command:
awplus(config)#
no ssh server allow-users john 192.168.1.*
Related Commands
show running-config ssh
show ssh server allow-users
ssh server deny-users
Parameter
Description
<username_pattern>
The username pattern that users can match to. An asterisk acts as a
wildcard character that matches any string of characters.
<hostname_pattern>
The host name pattern that hosts can match to. If specified, the
server allows the user to connect only from hosts matching the
pattern. An asterisk acts as a wildcard character that matches any
string of characters.
