How do I enable OpenSSH SSH server to listen on an IPv6 address under Linux or UNIX operating systems?
The ListenAddress directive in sshd_config file specifies the local addresses sshd should listen on. The syntax is as follows:
ListenAddress host ListenAddress IPv4_addr:port ListenAddress [IPv6_addr]:port
Edit /etc/ssh/sshd_config file, enter:
# vi /etc/ssh/sshd_config
To bind sshd to every IPv4 and IPv6 address on your server, enter:
ListenAddress 0.0.0.0 ListenAddress ::
To bind sshd to every IPv6 2607:f0d0:1002:11::2 address on your server, enter:
ListenAddress [2607:f0d0:1002:11::2]
To bind sshd to every IPv6 2607:f0d0:1002:11::2 address and port 311 on your server, enter:
ListenAddress [2607:f0d0:1002:11::2]:311
From the sshd_man page:
If port is not specified, sshd will listen on the address and all prior Port options specified. The default is to listen on all local addresses. Multiple ListenAddress options are permitted. Additionally, any Port options must precede this option for non port qualified addresses.
Save and close the file. If you changed the port, update your iptables or pf firewall configuration. Finally, reload sshd:
# service sshd reload
Featured Articles:
- 20 Linux System Monitoring Tools Every SysAdmin Should Know
- 20 Linux Server Hardening Security Tips
- My 10 UNIX Command Line Mistakes
- Linux: 20 Iptables Examples For New SysAdmins
- 25 PHP Security Best Practices For Sys Admins
- The Novice Guide To Buying A Linux Laptop
- 10 Greatest Open Source Software Of 2009
- Top 5 Email Client For Linux, Mac OS X, and Windows Users
- Top 20 OpenSSH Server Best Security Practices
- Top 10 Open Source Web-Based Project Management Software
- Top 5 Linux Video Editor Software
Facebook it - Tweet it - Print it -
{ 1 comment… read it below or add one }
You forgot to mention the sshd_config parameter AddressFamily any/inet/inet6 and accompanying commandline parameters -4 and -6 to further finegrain sshd usage.