slogin

Prev Next

Logs in to a remote device using the Secure Shell (SSH) client on the Trellix appliance.

Syntax

slogin [-1246AaCgkNnqsTtVvXxY] [-b <bind_address>] [-c <cipher_spec>] [-D <port>] [-e <escape_char>] [-i <identity_file>] [-L <port>:<host>:<hostport>] [-l <login_name>] [-m <mac_spec>] [-p <port>] [-R <port>:<host>:<hostport>] [user@hostname] [<command>]

Parameters

-1

Uses SSH version 1 only.

-2

Uses SSH version 2 only.

-4

Uses IPv4 addresses only.

-6

Uses IPv6 addresses only.

-a

Disables forwarding of the authentication agent connection.

-A

Enables forwarding of the authentication agent connection.

-b <bind_address>

Source address of the connection. Used on systems with more than one address.

-c <cipher_spec>

Cipher specification for encrypting the session.

-C

Requests compression of all data.

-D <port>

Used for application-level port forwarding.

-e <escape_char>

Sets the escape character for sessions with a pseudo terminal. The default character is ~.

-g

Allows remote hosts to connect to local forwarded ports.

-i <identity_file>

File that contains the identity (private key) for RSA or DSA authentication. The default is ~/.ssh/identity for SSH version 1, and ~/.ssh/id_rsa and ~/.ssh/id_dsa for SSH version 2.

-k

Disables forwarding of GSSAPI credentials to the server.

-l <login_name>

Login username on the remote machine.

-L <port>:<host>:<hostport>

Port on the local (client) host from which to forward traffic to a host and port on the remote side. For security, only port numbers 31000—31999 can be specified for the port parameter.

-m <mac_spec>

A comma-separated list of MAC (message authentication code) algorithms, in order of preference.

-n

Prevents reading from standard input (required when SSH is run in the background).

-N

Do not execute a remote command.

-p <port>

Port to connect to on the remote host.

-q

Suppresses warning and diagnostic messages.

-R <port>:<host>:<hostport>

Port on the remote (server) host from which to forward traffic to a host on the local side. For security, only ports 22 and 443 can be specified for the hostport parameter.

-s

(SSHv2 only) Requests invocation of a sub-system on the remote system. The sub-system is specified by the remote command.

-t

Forces pseudo-tty allocation. Used to execute screen-based programs on a remote system.

-T

Disables pseudo-tty allocation.

-v

Displays debugging messages. Multiple (up to three) -v options increase the verbosity.

-V

Displays the version number and then exits.

-x

Disables X11 forwarding.

-X

Enables X11 forwarding.

-Y

Enables trusted X11 forwarding.

user@hostname

Hostname or IP address of the remote device that you want to log into using SSH, optionally preceded by the username and the @ symbol.

Examples

The following example uses SSH to log in to a remote device as user "admin."

hostname > slogin admin@192.168.0.69

The following example specifies that connections to port 1234 on the remote side should be forwarded to local port 22.

hostname > slogin –R 1234:localhost:22

User role

Admin or Operator

Command mode

Standard

Supported appliances

Malware Analysis: Before release 6.4

Central Management System: Before release 6.4

Email Security — Server: Before release 6.4

File Protect: Before release 6.4

Endpoint Security (HX): Release 2.5

Network Security: Before release 6.4