vii
IKE configuration prerequisites ··································································································································· 283
IKE configuration task list ············································································································································ 283
Configuring an IKE profile ·········································································································································· 284
Configuring an IKE proposal ······································································································································ 286
Configuring an IKE keychain ······································································································································ 287
Configuring the global identity information ·············································································································· 288
Configuring the IKE keepalive function ······················································································································ 289
Configuring the IKE NAT keepalive function ············································································································ 289
Configuring IKE DPD···················································································································································· 290
Enabling invalid SPI recovery ····································································································································· 291
Setting the maximum number of IKE SAs ··················································································································· 291
Configuring SNMP notifications for IKE ···················································································································· 291
Displaying and maintaining IKE ································································································································· 292
IKE configuration examples ········································································································································ 292
Main mode IKE with pre-shared key authentication configuration example ················································ 292
Verifying the configuration ································································································································· 295
Troubleshooting IKE ····················································································································································· 295
IKE negotiation failed because no matching IKE proposals were found ······················································· 295
IKE negotiation failed because no IKE proposals or IKE keychains are referenced correctly····················· 296
IPsec SA negotiation failed because no matching IPsec transform sets were found ···································· 296
IPsec SA negotiation failed due to invalid identity information ······································································ 297
Configuring SSH ····················································································································································· 300
Overview ······································································································································································· 300
How SSH works ··················································································································································· 300
SSH authentication methods ······························································································································· 301
FIPS compliance ··························································································································································· 302
Configuring the device as an SSH server ·················································································································· 303
SSH server configuration task list ······················································································································ 303
Generating local key pairs ································································································································· 303
Enabling the Stelnet server ································································································································· 304
Enabling the SFTP server ···································································································································· 304
Enabling the SCP server ····································································································································· 305
Configuring NETCONF over SSH ····················································································································· 305
Configuring user lines for SSH login ················································································································· 305
Configuring a client's host public key ··············································································································· 306
Configuring an SSH user ···································································································································· 307
Configuring the SSH management parameters ······························································································· 308
Configuring the device as an Stelnet client ··············································································································· 310
Stelnet client configuration task list ···················································································································· 310
Specifying the source IP address for SSH packets ··························································································· 310
Establishing a connection to an Stelnet server ································································································· 310
Configuring the device as an SFTP client ·················································································································· 312
SFTP client configuration task list ······················································································································· 312
Specifying the source IP address for SFTP packets ·························································································· 312
Establishing a connection to an SFTP server ···································································································· 312
Working with SFTP directories ··························································································································· 314
Working with SFTP files ······································································································································ 314
Displaying help information ······························································································································· 314
Terminating the connection with the SFTP server ····························································································· 315
Configuring the device as an SCP client ··················································································································· 315
Displaying and maintaining SSH ······························································································································· 317
Stelnet configuration examples ··································································································································· 317
Password authentication enabled Stelnet server configuration example ······················································ 317
Publickey authentication enabled Stelnet server configuration example ······················································· 320
To Next Page
Loading...
Need help?
General