First of all you should enable built-in features of all zebra daemons:
service password-encryption no banner motd access-list localhost permit 127.0.0.1/32 line vty access-class localhostAfter that only connections coming from localhost will be accepted. Now you should access your daemons via
telnet 127.0.0.1 260x
command.
Then you will wish to have remote access to CLI. There are some ways to do it:
ssh $ROUTER telnet localhost $DAEMON
# sshd_config Subsystem szebra /usr/local/bin/szebra Subsystem sospfd /usr/local/bin/sospfd Subsystem sbgpd /usr/local/bin/sbgpdCreate telnet wrappers:
#!/bin/sh # zebra telnet wrapper /usr/bin/telnet localhost 2601Run
ssh -s remote-machine szebra
Using vtysh, *NIX groups and sudo'ing will be described later.