ProCurve 6200yl User's Guide download pdf (Page 238)

100

101

8-2

Configuring Secure Shell (SSH)

Overview

The switches covered in this guide use Secure Shell version 2 (SSHv2) to

provide remote access to management functions on the switches via

encrypted paths between the switch and management station clients capable

of SSH operation.

SSH provides Telnet-like functions but, unlike Telnet, SSH provides encrypted,

authenticated transactions. The authentication types include:

■ Client public-key authentication

■ Switch SSH and user password authentication

Client Public Key Authentication (Login/Operator Level) with User

Password Authentication (Enable/Manager Level). This option uses

one or more public keys (from clients) that must be stored on the switch. Only

a client with a private key that matches a stored public key can gain access

to the switch. (The same private key can be stored on one or more clients.)

Figure 8-1. Client Public Key Authentication Model

Feature Default Menu CLI Web

Generating a public/private key pair on the switch No n/a page 8-10 n/a

Using the switch’s public key n/a n/a page 8-12 n/a

Enabling SSH Disabled n/a page 8-15 n/a

Enabling client public-key authentication Disabled n/a pages 8-19,

8-22

n/a

Enabling user authentication Disabled n/a page 8-18 n/a

ProCurve

Switch

(SSH

Server)

1. Switch-to-Client SSH authentication.

2.Client-to-Switch (login rsa) authentication

3.User-to-Switch (enable password) authentication

options:

– Local

–TACACS+

–RADIUS

–None

SSH

Client

Work-

Station

1 2 ... 233 234 235 236 237 238 239 240 241 242 243 ... 595 596

Comments to this Manuals

No comments

ProCurve 6200yl User's Guide Page 238

Comments to this Manuals

Related products and manuals for Network switches ProCurve 6200yl