Security
30
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
3.4 Other Security Features
This section contains information on the following topics:
• Secure Shell (SSH)
• CSM Filters and CSM Security
• Exponential Login Backoff
• Encryption
• 802.1x Network Access Control
• TCP Enhanced Authentication and Keychain Authentication
3.4.1 Secure Shell (SSH)
Secure Shell Version 1 (SSH1) is a protocol that provides a secure, encrypted
Telnet-like connection to a router.
A connection is always initiated by the client (the user). Authentication takes place
by one of the configured authentication methods (local, RADIUS, or TACACS+). With
authentication and encryption, SSH allows for a secure connection over an insecure
network.
The 7705 SAR allows you to configure SSH1 or Secure Shell Version 2 (SSH2).
SSH1 and SSH2 are different protocols and encrypt at different parts of the packets.
SSH1 uses the server as well as host keys to authenticate systems, whereas SSH2
only uses host keys. SSH2 does not use the same networking implementation that
SSH1 does and is considered a more secure, efficient, and portable version of SSH.
Rather than validating identities via passwords, SSH2 can also use public key
encryption to authenticate remote hosts. For example, if you were to connect to a
remote host also running SSH2, the secure shell would use this system to verify that
the remote system is the host and not a computer set up to imitate it.
SSH runs on top of a transport layer (like TCP or IP), and provides authentication and
encryption capabilities. SSH supports remote login to another computer over a
network, remote command execution, and file relocation from one host to another.
Note: SSH1 is not supported on a 7705 SAR node that is running in FIPS-140-2 mode.
To Next Page
Loading...
