Directly Accessing A User Context Through Ssh - Cisco 4700M Administration Manual

Chapter 2 Enabling Remote Access to the ACE
Examples
The following example shows how to allow the ACE to receive ICMP pings:
host1/Admin(config)# class-map type management match-all ICMP-ALLOW_CLASS
host1/Admin(config-cmap-mgmt)# description Allow ICMP packets
host1/Admin(config-cmap-mgmt)# match protocol icmp source-address 172.16.10.0
255.255.255.254
host1/Admin(config-cmap-mgmt)# exit
host1/Admin(config)# policy-map type management first-action ICMP_ALLOW_POLICY
host1/Admin(config-pmap-mgmt)# class ICMP-ALLOW_CLASS
host1/Admin(config-pmap-mgmt-c)# permit
host1/Admin(config-pmap-mgmt-c)# exit
host1/Admin(config-pmap-mgmt)# exit
host1/Admin(config)# interface vlan 50
host1/Admin(config-if)# ip address 172.16.1.100 255.255.0.0
host1/Admin(config-if)# service-policy input ICMP_ALLOW_POLICY

Directly Accessing a User Context Through SSH

This section describes how to configure a user context and enable direct login access to that user context
from a remote SSH session. To perform this procedure, you must be the global administrator and in the
Admin context.
Task Flow
Follow these steps to first configure the ACE to provide direct access to a user context from SSH and
then access the user context:
Create a user context by entering the following command:
Step 1
host1/Admin(config)# context C1
host1/Admin(config-context)#
See the Cisco 4700 Series Application Control Engine Appliance Virtualization Configuration Guide.
Associate an existing VLAN with the user context so that the context can receive traffic classified for it
Step 2
by entering the following command:
host1/Admin(config-context)# allocate-interface vlan 100
See the Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration
Guide.
Generate the SSH host key pair by entering the following command:
Step 3
host1/Admin(config-context)# ssh key rsa1 1024
generating rsa1 key
.....
generated rsa1 key
See the
Change to the C1 context that you created in Step 1 and enter configuration mode in that context by
Step 4
entering the following commands:
host1/Admin(config-context)# do changeto C1
host1/C1(config-context)# exit
host1/C1(config)#
Only users authenticated in the Admin context can use the changeto command.
OL-20823-01
"Generating SSH Host Key Pairs"
Cisco 4700 Series Application Control Engine Appliance Administration Guide
section.
Enabling Remote Access to the ACE
2-21