Chapter 12
| Security Measures
Configuring the Secure Shell
– 285 –
d. When the server receives this message, it checks whether the supplied
key is acceptable for authentication, and if so, it then checks whether
the signature is correct. If both checks succeed, the client is
authenticated.
Note:
The SSH server supports up to four client sessions. The maximum number of
client sessions includes both current Telnet sessions and SSH sessions.
Note:
The SSH server can be accessed using any configured IPv4 or IPv6 interface
address on the switch.
Configuring the SSH
Server
Use the Security > SSH (Configure Global) page to enable the SSH server and
configure basic settings for authentication.
Note:
A host key pair must be configured on the switch before you can enable the
SSH server. See “Generating the Host Key Pair” on page 286.
Parameters
These parameters are displayed:
◆ SSH Server Status – Allows you to enable/disable the SSH server on the switch.
(Default: Disabled)
◆ Version – The Secure Shell version number. Version 2.0 is displayed, but the
switch supports management access via either SSH Version 1.5 or 2.0 clients.
◆ Authentication Timeout – Specifies the time interval in seconds that the SSH
server waits for a response from a client during an authentication attempt.
(Range: 1-120 seconds; Default: 120 seconds)
◆ Authentication Retries – Specifies the number of authentication attempts
that a client is allowed before authentication fails and the client has to restart
the authentication process. (Range: 1-5 times; Default: 3)
◆ Server-Key Size – Specifies the SSH server key size.
(Range: 512-896 bits; Default:768)
■
The server key is a private key that is never shared outside the switch.
■
The host key is shared with the SSH client, and is fixed at 1024 bits.
Web Interface
To configure the SSH server:
1. Click Security, SSH.
2. Select Configure Global from the Step list.
To Next Page
Loading...
Need help?
General
