How to Configure Security Policies to Allow SSH (STelnet, SFTP, and SCP)
Secure Shell (SSH) is a cryptographic network protocol for operating network services (such as remote login and file transfer) securely over an unsecured network. STelnet is the name of the SSH remote login function provided by Huawei to highlight its security compared with Telnet. Secure Copy (SCP) and Secure FTP (SFTP) are SSH-based file transfer protocols.
By default, SSH uses TCP port 22 to establish a connection. You can also customize a port.
No. |
Name |
Source Security Zone |
Destination Security Zone |
Source Address/Region |
Destination Address/Region |
Service |
Action |
---|---|---|---|---|---|---|---|
101 |
Allow inbound traffic |
Trust |
Local |
10.1.1.10/24 |
10.1.1.1/24 |
ssh (TCP: 22) |
permit |
102 |
Allow outbound traffic |
Local |
Untrust |
10.1.2.1/24 |
10.1.2.10/24 |
ssh (TCP: 22) |
permit |
103 |
Allow transmit traffic |
Trust |
Untrust |
10.1.1.10/24 |
10.1.2.10/24 |
ssh (TCP: 22) |
permit |