.. _example_service_ssh_match_matchhostdisable-password-authentication:

##########################################
Match Host Disable-Password-Authentication
##########################################

SSH connection test with match host disable-password-authentication
configuration. Tests that SSH server correctly blocks password authentication
for connections from clients with specific IP addresses (exact match).

********************************************
SSH Match Host With Blocked IP Address Fails
********************************************

Description
===========

Test SSH match host with exact IP address. DUT1 has IP '10.215.168.100'
which ``matches`` the blocked IP address. SSH password authentication should ``fail``.

Scenario
========

.. include:: matchhostdisable-password-authentication/sshmatchhostwithblockedipaddressfails

.. raw:: html

  <hr>

***********************************************
SSH Match Host With Allowed IP Address Succeeds
***********************************************

Description
===========

Test SSH match host with exact IP address. DUT1 has IP '10.215.168.50'
which does ``not match`` the blocked IP address. SSH password authentication should ``work``.

Scenario
========

.. include:: matchhostdisable-password-authentication/sshmatchhostwithallowedipaddresssucceeds

.. raw:: html

  <hr>