HPE FlexNetwork 5510 HI Series Security Configuration Guide

339
Establishing a connection to an Stelnet server
When you try to access an Stelnet server, the device must use the server's host public key to
authenticate the server. If the server's host public key is not configured on the device, the device will
notify you to confirm whether to continue with the access.
• If you choose to continue, the device accesses the server and downloads the server's host
public key.
• If you choose to not continue, the connection cannot be established.
As a best practice, configure the server's host public key on the device in an insecure network.
To establish a connection to an Stelnet server in Release 1111:
Task
Command
Remarks
Establish a
connection to an
Stelnet server.
• In non-FIPS mode, establish a connection to an
IPv4 Stelnet server:
ssh2 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer-ctos-cipher
{ 3des | aes128 | aes256 | des
} |
prefer-ctos-hmac { md5 | md5-96 | sha1 |
sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher
{ 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 |
sha1-96 } ] * [ dscp dscp-value | escape
character | publickey keyname | source
{ interface interface-type interface-number | ip
ip-address } ] *
• In FIPS mode, establish a connection to an IPv4
Stelnet server:
ssh2 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ identity-key rsa |
prefer-compress zlib | prefer-ctos-cipher
{ aes128 | aes256 } | prefer-ctos-hmac { sha1 |
sha1-96 } | prefer-kex dh-group14 |
prefer-stoc-cipher { aes128 | aes256
} |
prefer-stoc-hmac { sha1 | sha1-96
} ] *
[ escape character | publickey keyname |
source { interface interface-type
interface-number | ip ip-address } ] *
• In non-FIPS mode, establish a connection to an
IPv6 Stelnet server:
ssh2 ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ -i interface-type
interface-number ] [ identity-key { dsa | rsa } |
prefer-compress zlib | prefer- ctos-cipher
{ 3des | aes128 | aes256 | des
} |
prefer-ctos-hmac { md5 | md5-96 | sha1 |
sha1-96 } | prefer-kex { dh-group-exchange |
dh-group1 | dh-group14 } | prefer-stoc-cipher
{ 3des | aes128 | aes256 | des } |
prefer-stoc-hmac { md5 | md5-96 | sha1 |
sha1-96 } ] *[ dscp dscp-value | escape
character | publickey keyname | source
{ interface interface-type interface-number | ip
ip-address } ] *
• In FIPS mode, establish a connection to an IPv6
Stelnet server:
ssh2 ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name ] [ -i interface-type
Available in user view.

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English