Wired

last person joined: yesterday 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

ip ssh source-interface

Jump to Best Answer
  • 1.  ip ssh source-interface

    Posted Aug 12, 2019 01:49 PM

    Hi Guys, 

     

    I'm having issues with defining a source interface for my SSH sessions.

     

    We have a 3810M stack deployed in a datacenter where we have a management subnet that is not directly connected to our default route to get to the branch sites. 

     

    Here's a fictive IP plan that represents the situation:

    VLAN | IP Config IP Address Subnet Mask Std Local
    -------------------- + ---------- --------------- --------------- ----------
    MGMT | Manual 10.20.20.254 255.255.255.0 No No
    DATA   | Manual 10.10.20.254 255.255.255.248 No No

     

    ip route 0.0.0.0 0.0.0.0 10.10.20.253

     

    10.10.20.253 is the ip address of the firewall.

     

    When I try to SSH to a brach the switch uses the "Outgoing-interface" policy to select the SSH source address and thus chooses the wrong ip address. We have a firewall between the DC and branches that only allows SSH from the management subnet. 

     

    On first glance there seems to be no option in configuring the SSH source interface. 

    Is there a configuration option in a sub-config or something like that? 

     

    I would like to not make any changes to the firewall. 

     

    Thanks in advance guys!

     

    Kind regards,

     

    Michael. 

     

     



  • 2.  RE: ip ssh source-interface

    Posted Aug 13, 2019 06:10 AM

    when use the SSH client of the switch there is no option for select interface ?



  • 3.  RE: ip ssh source-interface

    Posted Aug 13, 2019 06:30 AM

    Hi,

     

    I do not have a "source" option when trying to connect. 

     

    Kind regards, 

     

    Michael. 



  • 4.  RE: ip ssh source-interface
    Best Answer

    Posted Aug 14, 2019 10:36 AM

    "ip source-interface telnet <interface>" also controls the SSH ip source address.