2-14
Controlling Management Access to the ProCurve Secure Router
Securing Management Access to the ProCurve Secure Router
Note The service password-encryption command is supported in the Secure
Router OS version J.04 and above. If you upgrade to this version of the OS,
enter this command but then need to revert back to a previous version (such
as J.03.01), you must first disable this command and re-enter all the necessary
passwords so that they are stored in clear text. If you do not disable this
command and re-enter the passwords, you will not be able to log back in to
the router after you revert to a previous version of the Secure Router OS that
does not support global password encryption.
Enabling Secure Copy Server
You can enable the secure copy (SCP) server, so that files are encrypted as
they are copied to and from the ProCurve Secure Router. You use the SCP
server in conjunction with SSH so that the user trying to access the server is
authenticated and the data transmitted is encrypted.
To enable the SCP server, enter the following command from the global
configuration mode context:
Syntax: ip scp server
To disable the SCP server, enter:
Syntax: no ip scp server
Viewing Information about Users
At any time, you can view information about the users who are accessing the
ProCurve Secure Router through the console, Telnet, SSH, FTP, and Web
browser interface. From the enable mode context, enter:
ProCurve# show users
Figure 2-1 shows the type of information that is displayed when you enter this
command. You can view the username that the user entered to obtain access,
the type of access (such as console or Telnet), and the time the connection
has been idle. For Telnet, SSH, FTP, and Web access, you can also view the IP
address of the device from which the user obtained access.
To Next Page
Loading...
Need help?
General
