Wireless Water Cooler

last person joined: 16 days ago 

Hang out and socialize with other community members in this off topic forum. Everything from industry trends to hobbies and interests are welcomed!
Back to discussions
Expand all | Collapse all

How do I disable ssh on an aruba 620 controiller

This thread has been viewed 0 times

  • 1.  How do I disable ssh on an aruba 620 controiller

    Posted Apr 04, 2014 02:05 PM

    We have noticed that our Aruba's external port that connects it to the WWW is seeing SSH traffic from China and the Korea. Since we never remote into the device. We would like to shut that down.

     

    If that is not possible we could like to see about limiting the attempts to connect to it befoe it refuses to respond to attempt to hack in to it. So if someone tried 3 times then the account would be locked for 30 minutes before the account could be used to try and get in again.

     

    I would appreciate any help or suggestions on how to achieve this



  • 2.  RE: How do I disable ssh on an aruba 620 controiller

    EMPLOYEE
    Posted Apr 04, 2014 02:38 PM

    You would probably want to put a port ACL on it:   The ACL below only allows the uplink of the controller (fastethernet 1/0) to get DHCP from the provider.  Outbound traffic is allowed, but no inbound traffic besides DHCP is allowed.

     

    ip access-list session dhcp-only
any any svc-dhcp permit
any any any deny
    
interface fastethernet 1/0
ip access-group dhcp-only session

     



  • 3.  RE: How do I disable ssh on an aruba 620 controiller

    Posted Apr 04, 2014 02:46 PM
    Thanks.

    But I need to have normal AP traffic cross the WWW port, but just want to block inbound SSH traffic

    Russell Oliver
    Network Engineer
    Arizona Tile LLC
    8829 S Priest Drive, Tempe, Arizona 85284
    Phone
    E-mail roliver@arizonatile.com
    http://www.arizonatile.com


  • 4.  RE: How do I disable ssh on an aruba 620 controiller
    Best Answer

    EMPLOYEE
    Posted Apr 04, 2014 02:47 PM 
    ip access-list session dhcp-only
any any svc-dhcp permit
any any svc-ssh deny
any any any permit