Technical Note: How to restrict SSH access over an interface

[JohnDevNet_FTNT]

Description

When a device is configured in order to permit SSH access it will be enabled on all interfaces:

FBL>enable
FBL#config mode
FBL(config)#ssh on

Solution

An accesslist can be configured to restrict SSH connection on a specific physical port:

FBL(config)#accesslist deny tcp <source_ip> <source_mask> <source_port> <destination_ip> <destination_mask> <destination_port> <accesslist_id>

FBL(config)#accessgroup <accesslist_id> port1