User's Manual 90 Document #: LTRT-10632
Mediant 800B Gateway & E-SBC
3. Click Apply, and then reset the device with a save-to-flash for your settings to take
effect.
For a detailed description of the Telnet parameters, see 'Telnet Parameters' on page 1061.
7.1.2 Enabling SSH with RSA Public Key for CLI
Unless configured for TLS, Telnet is not secure as it requires passwords to be transmitted
in clear text. To overcome this, you can use Secure SHell (SSH) which is the de-facto
standard for secure CLI. SSH 2.0 is a protocol built above TCP providing methods for key
exchange, authentication, encryption, and authorization. SSH requires appropriate client
software for the management PC. Most Linux distributions have OpenSSH pre-installed;
Windows-based PCs require an SSH client software such as PuTTY, which can be
downloaded from http://www.chiark.greenend.org.uk/~sgtatham/putty/. By default, SSH
uses the same username and password as the device's Telnet and Web server. SSH
supports 1024/2048-bit RSA public keys, providing carrier-grade security.
Follow the instructions below to configure the device with an administrator RSA key as a
means of strong authentication.
 To enable SSH and configure RSA public keys for Windows (using PuTTY SSH
software):
1. Start the PuTTY Key Generator program, and then do the following:
a. Under the 'Parameters' group, do the following:
♦ Select the SSH-2 RSA option.
♦ In the 'Number of bits in a generated key' field, enter "1024" bits.
b. Under the 'Actions' group, click Generate and then follow the on-screen
instructions.
c. Under the 'Actions' group, click Save private key to save the new private key to a
file (*.ppk) on your PC.
d. Under the 'Key' group, select the displayed encoded text (pubic key) between
"ssh-rsa" and "rsa-key-….", as shown in the example below:
Figure 7-1: Selecting Public RSA Key in PuTTY
2. You can use the public key per management user or for all management users:
To Next Page
Loading...
Need help?
General
