Extreme Networks ExtremeWare XOS Guide - Enabling SSH2 for Inbound Switch Access; Secure Shell 2

Secure Shell 2
ExtremeWare XOS 11.3 Concepts Guide
335
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
TACACS+ Acct Server Connect Timeout sec: 3
Primary TACACS+ Accounting Server:
Server name :
IP address : 10.201.31.238
Server IP Port: 49
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
Secondary TACACS+ Accounting Server:
Server name :
IP address : 10.201.31.235
Server IP Port: 49
Client address: 10.201.31.85 (VR-Default)
Shared secret : purple
Secure Shell 2
Secure Shell 2 (SSH2) is a feature of ExtremeWare XOS that allows you to encrypt session data between
a network administrator using SSH2 client software and the switch or to send encrypted data from the
switch to an SSH2 client on a remote system. Configuration and policy files may also be transferred to
the switch using the Secure Copy Protocol 2 (SCP2) or the Secure File Transfer Protocol (SFTP).
Beginning with ExtremeWare XOS 11.2, you can also use SSH2 to connect to other devices from the
switch. The ExtremeWare XOS CLI provides a command that enables the switch to function as an SSH2
client, sending commands to a remote system via an SSH2 session.
The ExtremeWare XOS SSH2 switch application also works with SSH2 client (version 2.x or later) from
SSH Communication Security, and with (version 2.5 or later) from OpenSSH. The SFTP file transfer
protocol is required for file transfer using SCP2.
The section describes the following topics:
● Enabling SSH2 for Inbound Switch Access on page 335
● Using ACLs to Control SSH2 Access on page 337
● Using SCP2 from an External SSH2 Client on page 338
● SSH2 Client Functions on the Switch on page 338
Enabling SSH2 for Inbound Switch Access
SSH2 functionality is not present in the base ExtremeWare XOS software image, but is available as an
additional, installable module. Before you can access any SSH2 commands, you must install this
additional software module. Without the software module, the commands do not appear on the
command line. To install the software module, see the instructions in Appendix A, “Software Upgrade
and Boot Options”.
NOTE
Do not terminate the SSH process (exsshd) that was installed since the last reboot unless you have saved your
configuration. If you have installed a software module and you terminate the newly installed process without saving
your configuration, your module may not be loaded when you attempt to restart the process with the start
process command.