.. _example_service_ssh_match_matchaddressdisable-password-authentication:

#############################################
Match Address Disable-Password-Authentication
#############################################

SSH connection test with match address disable-password-authentication
configuration. Tests that SSH server correctly blocks password authentication
for connections from specific IP addresses using /32 CIDR notation.

************************************
SSH Connection From Blocked IP Fails
************************************

Description
===========

DUT1 has IP 10.215.168.1 which ``matches`` the blocked IP 10.215.168.1/32.
 SSH password authentication should ``fail`` for this specific IP.

Scenario
========

.. include:: matchaddressdisable-password-authentication/sshconnectionfromblockedipfails

.. raw:: html

  <hr>

***************************************
SSH Connection From Allowed IP Succeeds
***************************************

Description
===========

DUT1 has IP 10.215.168.50 which does ``not match`` the blocked IP 10.215.168.1/32.
 SSH password authentication should ``work normally``.

Scenario
========

.. include:: matchaddressdisable-password-authentication/sshconnectionfromallowedipsucceeds

.. raw:: html

  <hr>