Enable ssh root access for NSX appliances

Products

• VMware NSX

Issue/Introduction

• Prior to NSX-T 3.2.0, ssh root access could only be configured at appliance deployment time.
• If root ssh access was not granted at deployment time, the root shell could still be accessed over ssh by connecting as admin user and then switching to the root user with the cli "st en" followed by the root password.
• NSX-T Data Center 3.2.0 and above allows for root ssh access to be configured post deployment via admin cli.

Environment

VMware NSX 4.x
VMware NSX-T Data Center 3.x

Resolution

Root ssh login status

> get service ssh
Service name:      ssh
Service state:     running
Start on boot:     True
Root login:        disabled


Enable root ssh login

> set ssh root-login

> get service ssh
Service name:      ssh
Service state:     running
Start on boot:     True
Root login:        enabled


Disable root ssh login

> clear ssh root-login

> get service ssh
Service name:      ssh
Service state:     running
Start on boot:     True
Root login:        disabled