ProCurve 6200yl User's Guide download pdf (Page 256)

100

101

8-20

Configuring Secure Shell (SSH)

Configuring the Switch for SSH Operation

For example, assume that you have a client public-key file named Client-

Keys.pub (on a TFTP server at 10.33.18.117) ready for downloading to the

switch. For SSH access to the switch you want to allow only clients having a

private key that matches a public key found in Client-Keys.pub. For Manager-

level (enable) access for successful SSH clients you want to use TACACS+ for

primary password authentication and local for secondary password authenti-

cation, with a Manager username of "1eader" and a password of "m0ns00n".

To set up this operation you would configure the switch in a manner similar

to the following:

Figure 8-11. Configuring for SSH Access Requiring a Client Public-Key Match and Manager Passwords

Configures the switch to authenticate a client public-key at

the login level with an optional secondary password method

(default: none).

Syntax: aaa authentication ssh enable < local | tacacs | radius > < local | none >

Configures a password method for the primary and second-

ary enable (Manager) access. If you do not specify an

optional secondary method, it defaults to none.

If the primary access method is local, you can only specify

none for a secondary access method.

ProCurve(config)# password manager user-name leader

New password for Manager: ********

Please retype new password for Manager: ********

ProCurve(config)# aaa authentication ssh login public-key none

ProCurve(config)# aaa authentication ssh enable tacacs local

ProCurve(config)# coy tftp pub-key-file 10.33.18.117

ProCurve(config)# write memory

Configures Manager user-

name and password.

Configures the

switch to allow

SSH access only

for a client whose

public key

matches one of the

keys in the public

key file.

Configures the primary and

secondary password methods for

Manager (enable) access. (Becomes

available after SSH access is granted

Copies a public key file

named "Client-Keys.pub"

into the switch.

1 2 ... 251 252 253 254 255 256 257 258 259 260 261 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 256

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl