C
HAPTER
13
| Security Measures
Configuring the Secure Shell
– 278 –
N
OTE
:
The SSH server supports up to four client sessions. The maximum
number of client sessions includes both current Telnet sessions and SSH
sessions.
N
OTE
:
The SSH server can be accessed using any configured IPv4 or IPv6
interface address on the switch.
CONFIGURING THE
SSH SERVER
Use the Security > SSH (Configure Global) page to enable the SSH server
and configure basic settings for authentication.
N
OTE
:
A host key pair must be configured on the switch before you can
enable the SSH server. See "Generating the Host Key Pair" on page 279.
CLI REFERENCES
â—† "Secure Shell" on page 684
PARAMETERS
These parameters are displayed in the web interface:
◆ SSH Server Status – Allows you to enable/disable the SSH server on
the switch.
(Default: Disabled)
◆ Version – The Secure Shell version number. Version 2.0 is displayed,
but the switch supports management access via either SSH Version 1.5
or 2.0 clients.
◆ Authentication Timeout – Specifies the time interval in seconds that
the SSH server waits for a response from a client during an
authentication attempt. (Range: 1-120 seconds; Default: 120 seconds)
◆ Authentication Retries – Specifies the number of authentication
attempts that a client is allowed before authentication fails and the
client has to restart the authentication process. (Range: 1-5 times;
Default: 3)
◆ Server-Key Size – Specifies the SSH server key size.
(Range: 512-896 bits; Default:768)
â–
The server key is a private key that is never shared outside the
switch.
â–
The host key is shared with the SSH client, and is fixed at 1024 bits.