2
Management
15
Command line interface
The
CLI
provides
a
comprehensive
set
of
commands
that
allow
the
display
and
modification
of
a
SEG
configuration.
This
section
provides
only
a
summary
for
using
the
CLI.
For
a
complete
reference
for
all
CLI
commands,
see
the
SEG
‐
100
Command
Line
Interface
Reference
.
CLI access methods
The
CLI
is
accessible
in
one
of
two
ways:
•
Remotely
through
a
network
connection
to
an
Ethernet
interface
on
the
hardware
platform,
using
the
Secure
Shell
(SSH)
protocol
from
an
SSH
client.
SSH
access
is
controlled
by
a
predefined
RemoteMgmtSSH
configuration
object.
•
Locally
through
the
RS232
serial
console
connection
port
of
a
SEG,
using
a
console
or
console
emulator.
Access
is
controlled
by
a
predefined
ComPortAccess
configuration
object
called
COM1
.
Controlling SSH access
The
Secure
Shell
(SSH)
protocol
can
be
used
to
access
the
CLI
over
a
network
from
a
remote
host
via
one
of
the
Ethernet
interfaces.
SSH
is
enabled
by
default
on
the
default
management
Ethernet
interface.
SSH
is
a
protocol
primarily
used
for
secure
communication
over
insecure
networks,
providing
strong
authentication
and
data
integrity.
SSH
clients
are
freely
available
for
almost
all
hardware
platforms.
The
SEG
supports
version
2
of
the
SSH
protocol.
A
predefined
RemoteMgmtSSH
object
controls
initial
SSH
access
on
the
default
management
interface.
A
single
RemoteMgmtSSH
object
exists
by
default
in
a
SEG
configuration
and
can
be
displayed
with
the
CLI
command:
Device:/>
show
RemoteManagement
RemoteMgmtSSH
The
following
output
confirms
that
SSH
access
has
be
enabled
on
the
sfp1
interface
from
the
sfp1_net
network.
Name
Interface
Network
‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐
ssh_mgmt
sfp1
sfp1_net
Authentication
for
SSH
access
is
controlled
by
the
AuthProfile
property
of
the
RemoteMgmtSSH
object.
By
default
this
is
set
to
a
predefined
AuthenticationProfile
object
called
MgmtAuthProfile
.
This
profile
points
to
the
predefined
local
user
database
that
contains
a
default
administrator
account
with
the
credentials:
•
Username:
admin
•
Password:
admin
To
remove
username/password
authentication
for
SSH,
the
authentication
profile
must
be
set
to
nothing
and
the
command
would
be:
Device:/>
set
RemoteManagement
RemoteMgmtSSH
ssh_mgmt
AuthProfile=
