Configuring ssh root access for NSX-T appliances

Products

• VMware NSX

Issue/Introduction

Prior to NSX-T Data Center 3.2.0, ssh root access could only be configured at appliance deployment time.

If root ssh access was not granted at deployment time, the root shell could still be accessed over ssh by connecting as admin user and then switching to the root user with the cli "st en" followed by the root password.

Environment

VMware NSX-T Data Center
VMware NSX-T Data Center 3.x

Resolution

NSX-T Data Center 3.2.0 and above allow for root ssh access to be configured post deployment via admin cli.

Root ssh login status

> get service ssh
Service name:      ssh
Service state:     running
Start on boot:     True
Root login:        disabled


Enable root ssh login

> set ssh root-login

> get service ssh
Service name:      ssh
Service state:     running
Start on boot:     True
Root login:        enabled


Disable root ssh login

> clear ssh root-login

> get service ssh
Service name:      ssh
Service state:     running
Start on boot:     True
Root login:        disabled