Zte ZXA10 C300 - Chapter 15 System Security Configuration; 15.1 Configuring SSH

Chapter15
SystemSecurity
Conguration
Systemsecuritycongurationcanpreventillegalnetwork-sidepacketsfromattacking
devices,thustoensurestablerunningofthedevices.
TheZXA10C300supportsthefollowingsystemsecurityfeatures:
lSecureShell(SSH)
lTerminalAccessControllerAccess-Control(TACACS+)
lRemoteAuthenticationDialInUserService(RADIUS)
lManagementACL
lControlpanelsafety
TableofContents
ConguringSSH.....................................................................................................
15-1
ConguringTACACS+..............................................................................................
15-3
ConguringRADIUS................................................................................................
15-4
ConguringManagementACL.................................................................................
15-5
ConguringControlPanelSafety..............................................................................15-6
15.1ConguringSSH
SSHcanreplaceT elnettoimplementsecureremotelogin.
Prerequisite
TheSSHclientsoftwarehasbeeninstalled.
Context
SSHcanencryptthedataduringtransmissiontopreventthe"intermediate"attacks.In
addition,SSHcompressesthedatatobetransmitted,thusincreasingthetransmission
speed.WhentheSSHclientcommunicateswiththeSSHserver,theusernameand
passwordareencrypted,thustopreventthepasswordfrombeingintercepted.
TheZXA10C300supportstheSSHserverfunction.
Steps
1.Inglobalcongurationmode,enableSSHserver.
ZXAN(config)#sshserverenable
15-1
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential