In this lab, we will restrict SSH access to specific user accounts from specific sources. This will allow us to granularly control SSH access to a host.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Allow Susan SSH access from host susan-ws.office21.net
Edit the
/etc/ssh/sshd_configfile with the following line:sudo vi /etc/ssh/sshd_config- enter password for cloud_user
AllowUsers Susan@susan-ws.office21.net
- Permit root SSH login from the subnet 10.0.1.0/24
- The first step is to permit root logins by removing the comment in front of the line
#PermitRootLogin yesin the/etc/ssh/sshd_conffile. - Secondly, we need to add
root@10.0.1.0/24to theAllowUsersline in the/etc/ssh/sshd_configfile. Now we need to restart the
sshdservice so the changes we made will take affect:systemctl restart sshd
- The first step is to permit root logins by removing the comment in front of the line
