NETCONF access-list

[wojciechlubas]

Hello everyone,

I would like to secure my router using Netconf with an access-list. Documentation says:

netconf-yang ssh {{ipv4 | ipv6 }access-list name access-list-name} | port port-number}

But on my router there is no such option:

router#netconf-yang ssh ?
port Starting (or only) Port number to listen on

router#netconf-yang ssh ipv4 access-list name test
                                        ^
% Invalid input detected at '^' marker.

Any ideas? Especially, that I am going to use NETCONF only in my Management vrf, and now is accessible via any public IP...

[Mark Elsen]

                                                 - Check these requirements :

         https://www.cisco.com/c/en/us/support/docs/storage-networking/management/200933-YANG-NETCONF-Configuration-Validation.html#anc2

 M.

[marinogr]

I have configured like configuration quide .

But the ACL is not working and does not show matches.