Routing

last person joined: 4 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.
  • 1.  MX5-T SSH configuration for management

    Posted 06-05-2014 03:02

    Hi,

     

    I was trying to configure SSH for management on MX5-T but there was no ssh service in system services for management.

     

    I am using Software version : 12.1R5.5 (Junos Worldwide) on MX

     

    Kindly suggest how to configure SSH management access on MX

     

    Thank you,

    Nik...

     



  • 2.  RE: MX5-T SSH configuration for management
    Best Answer

    Posted 06-05-2014 03:38

    You would need the US/Canada version instead of the Worldwide version of JunOS if you need SSH.  The SSH encryption code is export-restricted by the US government.

     

    Ron



  • 3.  RE: MX5-T SSH configuration for management

    Posted 06-05-2014 04:27

    Ronf answer is correc.

     

    I got error message while commiting : set system services sssh,  commit.

     

    admin@core# commit

    [edit system services ssh]

      'ssh'

        warning: daemon binary /usr/sbin/sshd not found

    commit complete

     

    [edit]

    admin@core#

     

    Plz suggest any alternative...except domestic version.



  • 4.  RE: MX5-T SSH configuration for management

    Posted 06-14-2014 07:36

    I do not know of an alternative other than to use telnet.  You might consider connecting to a box in the same subnet as your router via ssh, and then using telnet to connect from that box to the MX5.  The setup a firewall-filter only allowing telnet from that one system.  Not perfect in that the traffic would be unencrypted between those two boxes, but all-in-all a pretty low risk imho.

     

    Ron



  • 5.  RE: MX5-T SSH configuration for management

    Posted 06-15-2014 05:00

    Your other option is to create a completely separate Out-of-band network for management.  Then require an encrypted vpn to enter that network.  This way the only place the unencrypted telnet traffic transits is the isolated network reducing your risk.



  • 6.  RE: MX5-T SSH configuration for management

    Posted 06-05-2014 03:38

    Hello Nikhil

    did you explicitly type: "set system services ssh"

    and then commit