SSH Hopping - NCOS-Out-of-Band-Management/SSH-Hopping

Configuring Advanced Out-of-Band Management
NetCloud Feature
Device Administration > Device
Device Administration > Remote Connections > Out of Band Management
ft:locale
en-US
ft:sourceName
Paligo_Prod

Users are able to SSH into any device on either the WAN or LAN that is running an SSH server.

  • Configurable options: Port, login name, data compression, session ciphers

Supported Ciphers 

  • aes256-ctr

  • aes192-ctr

  • aes128-ctr

  • aes256-cbc

  • aes192-cbc

  • aes128-cbc

  • 3des-cbc

  • blowfish-cbc

Client uses the below ciphers by default to support PCI compliance: 

  • aes256-ctr

  • aes192-ctr

  • aes128-ctr

Required arguments: Hostname (either the hostname or a user@hostname pair)

Optional arguments:  

  • -v – Debug level. May be specified up to three times (-v, -vv, -vvv).

  • -C – Requests compression of all data.

  • -1 – Force ssh to try protocol version 1 only. 

  • -2 – Force ssh to try protocol version 2 only. 

  • -l – Specifies login name.

  • -p – Specifies port.

  • -c – Comma separated list of ciphers (for example, aes256-ctr, aes192-ctr, aes128-ctr).

    image14.png

Important considerations: 

  • When prompted if you trust the host key, make sure to type "yes" and not "y".

  • Only one session can be active at a time. If a new session is opened (if the device is accessed by a different method or by a second user) before the original one is stopped, you may receive garbled feedback.