InformationSSH should be utilized for remote console sessions to Juniper routers.
SSH provides administrators with a remote console session on the router in a similar fashion to Telnet. Unlike Telnet, SSH encrypts all data as it transits the network and ensures the identity of the remote host.
Because of this extra protection, all remote console sessions should use SSH.
If Remote CLI or services which use SSH for transport, like Secure Copy (SCP) or NETCONF, are required SSH should be disabled.
Disabling SSH may result in loss of remote management of the device and also impact other services, like NETCONF, which use SSH for transport.
SolutionTo enable SSH access issue the following command from the [edit system] hierarchy:
[email protected]#set services ssh
Where SSH is used, all other Recommendations in this section should be considered.
If SSH is currently configured but is not required it should be disabled using the following command from the [edit system] hierarchy:
[email protected]#delete services ssh
For most platforms SSH access is enabled by default.