Zte ZXR10 5900 Series - SSH Connection Configuration

Chapter2UsageandOperation
Note:
i.ZXR105900/5200allowsuptofourTelnetusersatatime.
ii.Nevermodify/deletetheIPaddressofthemanagement
EthernetportduringTelnetcongurationthroughtheman-
agementport;otherwise,theT elnetconnectionwillbebro-
ken.
2.Telnettotheswitchfromotherdevices(suchasaswitchor
router).
i.ConguretheIPaddressesandinterfaceoftheVLAN
throughtheconsoleport.
ii.ConguretheT elnetloginusernameandpasswordthrough
theconsoleport.
iii.Considerrouterasanexample.Connecttherouterandthe
switch,ensuringthattheroutercanpingtheIPaddressof
theswitchVLANinterface.
iv.RunthetelnetcommandontherouterandinputtheIP
addressoftheVLANinterfacetologintotheswitch.
SSHConnectionConfiguration
TelnetandFTPconnectionsarenotsafebecausetheyusetheplain
texttotransmitthepasswordanddataonthenetwork.Thisre-
sultsindatatobeeasilyinterceptedbyattackers.Adisadvantage
oftheTelnet/FTPsecurityauthenticationisthatitiseasilyattacked
bytheman-in-the-middle.Thisimitatestheservertoreceivethe
datasentbytheclientandimitatestheclienttotransmitthedata
totherealserver .
SSHcansolvethishiddentrouble.TheSSHsetsupasecurity
channelfortheremoteloginonnon-securitynetworkandother
networktoencryptandcompressalltransmitteddata.Inthis
way,nousefulinformationcanbeobtainedintheinterception.
ThecurrentSSHprotocolhastwoversionsthatincompatibleeach
other:SSHv1.xandSSHv2.x.ZXR105900/5200supportsthe
SSHv2.0thatprovidesasaferemoteloginfunction.
SSHconsistsofserverandclient,ZXR105900/5200servesasSSH
serverandthehostrunsSSHclienttologintotheswitch.
1.ExecutethefollowingcommandtoenabletheSSHserverin
ZXR105900/5200.Bydefault,SSHserverfunctionisdisabled.
sshserverenable
2.ConnectthehostnetworkinterfacetotheswitchEthernetin-
terfacesothatthehostcanpingtheIPoftheswitchVLAN
interface.
3.RuntheSSHclientsoftware(putty)onthehost.
i.SettheIPandportnumberoftheSSHserver ,asshown
inF
igure9.
CondentialandProprietaryInformationofZTECORPORATION9