outbound-ssh

Defines a device-initiated connection. This value serves to uniquely identify the outbound-ssh configuration stanza. Each outbound-ssh stanza represents a single outbound SSH connection. Thus, the administrator is free to assign the client-id any meaningful unique value. This attribute is not sent to the client management application.

Hostname, IPv4 address, or IPv6 address of the management application server.

• Syntax: You can list multiple servers by adding each server’s IP address or hostname along with the following connection parameters:

  • port port-number—Specifies the port number at which a server listens for outbound SSH connection requests.

    Default: port 22

  • retry number—Specifies the maximum number of times the device attempts to establish an outbound SSH connection before giving up.

    Default: 3 attempts

  • timeout seconds—Specifies how long the device waits between attempts to reconnect to the specified IP address to establish an outbound SSH connection before giving up.

    Default: 15 seconds

(Required) Identifies the device to the management application. Each time the device establishes an outbound SSH connection, it first sends an initiation sequence (device-id) to the management application.

(Optional) When configured, specifies that the device should send SSH protocol keepalive messages to the management application.

• Syntax: To configure keepalive messages, you must set both the retry and timeout attributes:

  • retry number—specifies how many keepalive messages the device sends without receiving a response from the application. When that number is exceeded, the device disconnects from the application, ending the outbound SSH connection.

    Default: 3 attempts

  • timeout seconds—specifies how long the device waits to receive data before sending a request for acknowledgment from the application.

    Default: 15 seconds

(Optional) Specify the method the device uses to reestablish a disconnected outbound SSH connection.

• Values: Two methods are available:

  • in-order—Configures the device to reconnect to the first configured server. If this server is unavailable, the device tries to connect to the next configured server. The device keeps trying each server in the configured list until the device can establish a connection.

  • sticky—Specify that the device should first attempt to reconnect to the management server from which it disconnected. If that server is unavailable, the device then attempts to connect to the next configured server. The device keeps trying each server in the configured list until the device can establish a connection.

(SRX Series and MX Series only) Specify the name of the routing instance on which the outbound SSH connection needs to be established. If you do not specify a routing instance, your device will establish the outbound SSH connection using the default routing table.

Configures the device to send the device’s public SSH host key when the device connects to the management server. This is the recommended method of maintaining a current copy of the device’s public key.

Configures the management application to accept NETCONF as an available service.