Displaying Remote Access Session Information - Cisco 4700M Administration Manual

Displaying Remote Access Session Information

Configure the VLAN interface that you allocated to the user context in Step 2 by entering the following
Step 5
commands:
host1/C1(config)# interface vlan 50
host1/C1(config-if)# ip address 192.168.1.1 255.255.255.0
host1/C1(config-if)# no shutdown
host1/C1(config-if)# exit
host1/C1(config)#
For example, assign an IP address to the interface and reenable the interface within the context with the
no shutdown command. See the Cisco 4700 Series Application Control Engine Appliance Routing and
Bridging Configuration Guide.
Create an SSH remote management policy and apply the associated service policy to all VLAN
Step 6
interfaces or just to the VLAN interface allocated to the user context by entering the following
commands:
host1/C1(config)# class-map type management match-all SSH-ALLOW_CLASS
host1/C1(config-cmap-mgmt)# match protocol ssh source-address 172.16.10.0 255.255.255.254
host1/C1(config-cmap-mgmt)# exit
host1/C1(config)#
host1/C1(config)# policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
host1/C1(config-pmap-mgmt)# class SSH-ALLOW_CLASS
host1/C1(config-pmap-mgmt-c)# permit
host1/C1(config-pmap-mgmt-c)# exit
host1/C1(config-pmap-mgmt)# exit
host1/C1(config)# interface vlan 50
host1/C1(config-if)# ip address 192.168.1.1 255.255.255.0
host1/C1(config-if)# service-policy input REMOTE_MGMT_ALLOW_POLICY
host1/C1(config-if)# exit
host1/C1(config)#
See the
Create an IP route by entering the following command:
Step 7
host1/C1(config)# ip route 0.0.0.0 255.255.255.0 192.168.4.8
See the Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide.
Follow theses steps to directly access the user context from an SSH client:
Step 8
a.
b.
Displaying Remote Access Session Information
This section describes how to display remote access session information and includes the following
topics:
•
•
Cisco 4700 Series Application Control Engine Appliance Administration Guide
2-22
"Configuring Remote Network Management Traffic Services"
From the SSH client, establish a remote SSH session to the IP address of the user context VLAN
interface.
Enter the password for the user context VLAN interface. The ACE CLI prompt appears in Exec
mode of the user context.
host1/C1#
Displaying Telnet Session Information
Displaying SSH Session Information
Chapter 2 Enabling Remote Access to the ACE
section.
OL-20823-01