# CLI over SSH and disabled built-in SSH server

**URL:** <https://dmap-community.ductus.global/t/cli-over-ssh-and-disabled-built-in-ssh-server/992>\
**Category:** Other Northbound Interfaces\
**Created:** [February 1, 2017, 2:29pm UTC](https://dmap-community.ductus.global/t/cli-over-ssh-and-disabled-built-in-ssh-server/992 "2017-02-01T14:29:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![melissop](https://avatars.discourse-cdn.com/v4/letter/m/df705f/32.png) [@melissop](https://dmap-community.ductus.global/u/melissop)\
**Post date:** [February 1, 2017, 2:29pm UTC](https://dmap-community.ductus.global/t/cli-over-ssh-and-disabled-built-in-ssh-server/992/1 "2017-02-01T14:29:20Z")

</div>

Hi,

I’m working on a solution where built-in SSH is disabled and authentication is taken over openSSH. netconf-subsys is also used.  
So far so good! netconf-subsys takes care of ssh traffic and forwards it to port 2023. What should I do in order to utilize cli over ssh by using openSSH for authentication?  
Should I modify netconf-subsys in order to handle port 2024 traffic also or this does not make sense at all?  
Should I introduce a new openSSH subsystem for explicit port 2024 traffic handling?  
Something else?

Thanks,  
Tasos

---

<div class="post-metadata">

**Author:** ![cohult](https://yyz2.discourse-cdn.com/flex010/user_avatar/dmap-community.ductus.global/cohult/32/221_2.png) [@cohult](https://dmap-community.ductus.global/u/cohult)\
**Post date:** [February 1, 2017, 3:38pm UTC](https://dmap-community.ductus.global/t/cli-over-ssh-and-disabled-built-in-ssh-server/992/2 "2017-02-01T15:38:00Z")

</div>

Hi,  
One way is to add the following to your sshd\_config file:

```
Match LocalPort 2024
    ForceCommand /path/to/confd/bin/confd_cli
```

---

<div class="post-metadata">

**Author:** ![cohult](https://yyz2.discourse-cdn.com/flex010/user_avatar/dmap-community.ductus.global/cohult/32/221_2.png) [@cohult](https://dmap-community.ductus.global/u/cohult)\
**Post date:** [February 1, 2017, 4:01pm UTC](https://dmap-community.ductus.global/t/cli-over-ssh-and-disabled-built-in-ssh-server/992/3 "2017-02-01T16:01:52Z")

</div>

> [@cohult](#):
>
> Match LocalPort 2024  
> ForceCommand /path/to/confd/bin/confd\_cli

Remember to also add  
`Port 2024`  
to sshd\_config and in confd.conf disable SSH for the CLI