Remote management access to a router is disabled by default and must be explicitly enabled. Only console access to the router is enabled in a default configuration. This restriction applies to all management access protocols such as telnet, ssh, and ftp.

This article describes the Telnet and SSH methods and the commands to enable them.

Telnet

• To enable a telnet session to the switch, type the following commands: 

[edit]
user@switch# set system services telnet

Commit your changes.

SSH

The secure shell (SSH) provides secure encrypted communications over an insecure network and is therefore useful for switch management. The switch needs the Crypto package to enable the SSH service. The Crypto package is installed by default with the "domestic" JUNOS-ex software package. To verify that the Crypto package is installed, check the output of show version on the switch.

• To enable secure session to the switch, use the following commands:

[edit]
user@switch# set system services ssh

Commit your changes.

Both access methods allow users to control the number of allowed connections (connection-limit) and the number of allowed connections per minute (rate-limit).

For example:

user@switch# set system services telnet connection-limit 10 rate-limit 4
user@switch# set system services ssh connection-limit 10 rate-limit 4

2020-10-21: Article reviewed for accuracy; no changes made