Disable shell access

To prohibit access to the shell prompt for all authentication groups, disable the Allow shell parameter.. This does not prevent access to the Admin CLI.

Note If shell access is disabled, re-enabling it will erase the device's configuration and perform a factory reset.

To disable shell access:

  1. Choose the management interface you want to use to access your device. Click a dropdown for instructions.

    1. Log in to Digi Remote Manager.

    1. Navigate to the device's dashboard.

    1. Log in to your device's Web UI.

    Log in to your device's Admin CLI via an SSH client, Telnet client, or terminal emulator.

  2. Configure the settings.

    1. Click to open the device's configuration menu.

      • In Digi Remote Manager, on the device dashboard, click Settings.

      • In the Web UI, click Device Configuration.

    2. Click Authentication.
    3. Click to disable Allow shell.

      Note If shell access is disabled, re-enabling it will erase the device's configuration and perform a factory reset.

    4. Click Apply to save the configuration and apply the change.

    1. At the CLI prompt, type config and then press Enter.

    2. Set the allow_shell parameter to false:
      (config)> auth allow_shell false

      Note If shell access is disabled, re-enabling it will erase the device's configuration and perform a factory reset.

    3. Save the configuration and apply the change.
      (config)> save
Configuration saved.
>
    4. Type exit to exit the Admin CLI.

      Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.