Dell SmartFabric OS10 User Guide Release 10.5.3

• vrf management - (Optional) SSH to an IP address in a management VRF instance.
• vrf vrf-name - (Optional) SSH to an IP address to a specified VRF instance.
• -b source-ip-address - (Optional) Enter the source IPv4 or IPv6 address. If not mentioned, this option chooses the source address corresponding to the destination address from the route table.
• -B source-intherface - (Optional) Enter the source interface name without spaces. If not mentioned, this option chooses the source address corresponding to the destination interface from the route table.
  • For a physical Ethernet interface, enter ethernet<node/slot/port>; for example, ethernet1/1/1.
  • For a VLAN interface, enter vlan<vlan-id;> for example, vlan10.
  • For a Loopback interface, enter loopback<id>; for example, loopback1.
  • For Virtual-Network, enter virtual-network<vn-id>; for example, virtual-network20.
  • For a port-channel interface, enter port-channelchannel-id; for example, port-channel11.
• -c encryption-cypher - (Optional) Enter the supported encryption ciphers. You can issue multi encryption ciphers. For example, ssh -c chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com 9.1.1.2. Following is the default list of Cipher algorithms used by SSH Client for establishing the session when cipher algorithm is not explicitly mentioned by user, the first cipher algorithm matching the SSH server's list will be used for encryption.
  • chacha20-poly1305@openssh.com
  • aes128-ctr
  • aes192-ctr
  • aes256-ctr
  • aes128-gcm@openssh.com
  • aes256-gcm@openssh.com
  Following is the list of additional Ciphers supported in OS10 SSH Client CLI:

  • 3des-cbc
  • aes128-cbc
  • aes192-cbc
  • aes256-cbc
• -l username - (Optional) Enter the session username. If username is not specified, the current session username from which SSH client command is invoked is used to initiate an SSH session.
• -m HMAC-algorithm - (Optional) Enter the supported Host Message Authentication Code algorithm. You can issue multiple HMAC algorithms. For example, ssh -m umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com 9.1.1.2. Following is the default list of Message Authentication code used by SSH Client for establishing the session when HMAC is not explicitly mentioned by user, the first HMAC matching the SSH server's list will be used for authentication.
  • umac-64-etm@openssh.com
  • umac-128-etm@openssh.com
  • hmac-sha2-256-etm@openssh.com
  • hmac-sha2-512-etm@openssh.com
  • hmac-sha1-etm@openssh.com
  • umac-64@openssh.com
  • umac-128@openssh.com
  • hmac-sha2-256
  • hmac-sha2-512
  • hmac-sha1
  Following is the list of additional HMAC's supported in OS10 SSH Client CLI:

  • hmac-md5
  • hmac-md5-96
  • hmac-sha1-96
  • hmac-md5-etm@openssh.com
  • hmac-md5-96-etm@openssh.com
  • hmac-sha1-96-etm@openssh.com
• -p port-number - (Optional) Enter the SSH server port number.Default port number is 22.
• -h - Displays help for this command.
• destination - Enter the IP address or name of the remote SSH server. Name of the SSH server can contain symbols. such as os10-dell.com.

• vrf - management.
• -c - chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
• -l - Currrent session username.
• -m - umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
• -p - 22
• -b and -B - The default values depend on the source IP / Interface from the routing table for that specific destination.

SSH is a command for logging into a remote machine and for executing commands on a remote machine. This provides a secure encrypted communication between two un-trusted hosts over an insecure network.

This command is available for all user-roles but it has to be enabled using the ip ssh client cli enable command which is accessible only for sysadmin and secadmin user roles .

If you try to invoke the SSH command when the SSH command is disabled, an Unrecognized command error appears.

OS10_Switch_1# ssh 9.1.1.2
The authenticity of host '9.1.1.2 (9.1.1.2)' can't be established.
ECDSA key fingerprint is SHA256:43XxebRXcDxO8XBWFHcitZOFv/h43VkRwSyczGWS4Og.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '9.1.1.2' (ECDSA) to the list of known hosts.
Debian GNU/Linux 9

Dell EMC Networking Operating System (OS10)
admin@9.1.1.2's password:
Linux S4000-6212 4.9.189 #1 SMP Debian 4.9.189-3+deb9u2 x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.


-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
-* Dell EMC Network Operating System (OS10) *-
-* *-
-* Copyright (c) 1999-2020 by Dell Inc. All Rights Reserved. *-
-* *-
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-

This product is protected by U.S. and international copyright and
intellectual property laws. Dell EMC and the Dell EMC logo are
trademarks of Dell Inc. in the United States and/or other
jurisdictions. All other marks and names mentioned herein may be
trademarks of their respective companies.

%Warning : Default password for admin account should be changed to secure the system
OS10_Switch_2#

OS10_Switch_1# ssh -h
usage: [-b source_ip_address] [-B source_interface] [-c encryption_cipher] [-l username] [ -m HMAC_algorithm] [-p port-number] [-h] Hostname

Linux options supported for SSH.

optional arguments:
-h, --help show this help message and exit

SSH Options:
-b [Source IP Address]
Source Address of the connection
-B [Source Interface]
Source Interface of the connection
-c [Encryption Cipher]
Encryption cipher to use
-l [Username] User name option
-m [HMAC Algorithm] HMAC algorithm to use
-p [Port Number] SSH server port option (default 22)
Hostname IP address or hostname of a remote system
S4000-6216#