DragonWave Horizon COMPACT - Secure Shell Access Security; Configuring Secure Shell (Ssh)

Horizon Compact Management
105
Horizon Compact Release 1.01.00 Wireless Ethernet Product User Manual – Volume 2
4.4 Secure Shell Access Security
Telnet sessions over a network such as the Internet are not secure. User names and passwords, as well
as commands and system responses, are transmitted in clear text during a Telnet session. A secure shell
(SSH) protocol can be enabled in the Horizon Compact system to ensure that access to the units is
restricted to authorized clients. Horizon Compact uses the Secure Shell SSH2 server programme to
create the secure environment for Telnet sessions. SSH2 is a recognised industry standard, encrypting,
security, programme. When enabled, SSH encrypts the entire Telnet session, including all usernames,
passwords, commands and responses from the system. SSH also verifies that you are talking to the
desired server by means of an authentication process using a “fingerprint”. The “fingerprint” is a unique
identifier found only on the desired server.
A Secure Shell client programme needs to be installed on any computer which is to be used to manage a
Horizon Compact system with SSH enabled. A free SSH client programme (PuTTY) is available on the
Web.
Note that both SSH and Telnet can be enabled at the same time. To ensure security, once SSH has been
enabled, disable Telnet.
Also note that the Web server must be enabled on the Horizon before SSH can be enabled.
4.4.1 Configuring Secure Shell (SSH)
Use the following procedure to manage the SSH feature of the Horizon Compact system.
Procedure 4-3
Configuring Secure Shell (SSH)
Required Action Steps
login Log in as the Super User.
get ssh server
Returns the status of the Secure Shell SSH2 server.
Sequence :
get ssh server press Enter
The system responds:
ssh server is [on/off]
set ssh server
Enables or disables the Secure Shell SSH2 server.
Sequence :
set ssh server [on/off] press Enter
The system responds:
ssh server is [on/off]
Note: The Web server must be ON before the SSH server can be
enabled.
A system reset is required before SSH will be invoked.