By default, the SP accepts SSH connection requests from administration hosts of any IP addresses. You can configure the SP to accept SSH connection requests from only the administration hosts that have the IP addresses you specify. The changes you make apply to SSH access to the SP of any nodes in the cluster.
The following examples show the default setting for SSH access to the SP, change the default by limiting SP access to only the specified IP addresses, remove the specified IP addresses from the access list, and then restore SP access for all IP addresses:
cluster1::> system service-processor ssh show Allowed Addresses: 0.0.0.0/0, ::/0 cluster1::> system service-processor ssh add-allowed-addresses -allowed-addresses 192.168.1.202/24, 192.168.10.201/24 Warning: The default "allow all" setting (0.0.0.0/0, ::/0) will be replaced with your changes. Do you want to continue? {y|n}: y cluster1::> system service-processor ssh show Allowed Addresses: 192.168.1.202/24, 192.168.10.201/24 cluster1::> system service-processor ssh remove-allowed-addresses -allowed-addresses 192.168.1.202/24, 192.168.10.201/24 Warning: If all IP addresses are removed from the allowed address list, all IP addresses will be denied access. To restore the "allow all" default, use the "system service-processor ssh add-allowed-addresses -allowed-addresses 0.0.0.0/0, ::/0" command. Do you want to continue? {y|n}: y cluster1::> system service-processor ssh show Allowed Addresses: - cluster1::> system service-processor ssh add-allowed-addresses -allowed-addresses 0.0.0.0/0, ::/0 cluster1::> system service-processor ssh show Allowed Addresses: 0.0.0.0/0, ::/0