Avaya Cajun P580, User Manual, Page: 111 / 770

Document No. 650-100-700, Issue 1 4-3
Security
Viewing the
Secure Mode
Setting
To view the secure mode setting, use the following CLI command:
>
show secure-mode
SSHv2
Overview
Purpose of SSH
The Avaya Multiservice switch supports Secure Shell (SSH) version 2 for
clients and servers. SSH is a protocol for secure remote login and other
secure services. SSH provides a secure service that is similar to Telnet.
SSH is necessary because Telnet transmits unencrypted text TCP/IP packets
that anyone on the same network can intercept. SSH encrypts the data being
transmitted and allows for several methods of client/server and user
authentication, connection integrity, and client/server verification. SSH
runs on top of a TCP/IP connection.
SSH Server and
Client
You can use the Avaya Multiservice switch as a server for SSH
connections. The SSH server protocol relies on a public/private key pair
that is generated on the server. The private key is kept on the server and
cannot be viewed. The public key can be displayed and is used by remote
clients to connect to the server. When a client tries to connect to the server,
the server provides the public key to the client. Depending on the
configuration of the client, it may use this key directly, or verify it against a
locally stored copy.
The Avaya Multiservice switch can also be used as a client in SSH
connections.
Encryption
Ciphers
The Avaya Multiservice switch supports Blowfish and 3DES encryption
ciphers. When the client connects to the host, the client supplies a list of
ciphers that it supports. The server selects the strongest common cipher.
You can also configure the Avaya Multiservice switch to force use of a
single cipher.
User
Authentication
The Avaya Multiservice switch supports only password authentication.
Each login attempt requires a username and password authentication for
logging onto the switch.You can also use a RADIUS server for remote
password authentication over a network. User authentication occurs after an
SSH session is successfully established.
The switch supports a maximum of seven client and server SSH sessions
running simultaneously. All connections require password authentication.