topic Re: accessing switches via SSH in Network Security

accessing switches via SSH

Amafsha1 — Fri, 21 Feb 2020 15:29:48 GMT

Hello, I have a couple Nexus 9k switches that have a good amount of interface IPs (SVIs) on them that are used part of the VPC process running between the 2 N9ks.

If I take any of those SVIs IP addresses and put in the IP into putty, I can SSH into the switch. Since there are so many IP interfaces on those switches; then in turn there are so many ways to access the N9ks via SSH. How do I limit this so only typing the mgmt address of the switch I can access the switch?

Re: accessing switches via SSH

Dennis Mink — Fri, 09 Mar 2018 02:35:05 GMT

try this:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/best_practices/cli_mgmt_guide/cli_mgmt_bp/connect.html

or you could put an acl on every SVi, you dont want to connect to, to deny port 22.

personally I would worry more about the source IP that is trying to connect than what it is trying to connect TO