Equinox Systems Equinox Console Manager CCM4850 CCM4850 CCM4850, Installer/User Manual

Page: 30 / 100

18 CCM4850 Installer/User Guide
• When using the KEY keyword to specify the SSH key, the KEY parameter specifies the actual
uuencoded SSH key. This is for configurations that do not implement an FTP server. The CCM
appliance stores the specified key in the CCM user database.
The CCM appliance processes a uuencoded SSH2 public key file with the format described in the
IETF document draft-ietf-secshpublickeyfile-02. The key must follow all format requirements. The
UNIX ssh-keygen2 generates this file format. The CCM appliance also processes a uuencoded
SSH1 public key file. The UNIX ssh-keygen generates this file format.
To enable SSH session access to the CCM appliance:
1. Issue a Show Server Security command to ensure that you are using an authentication method
other than None.
SHOW SERVER SECURITY
2. Issue a Server SSH command with the Enable parameter. You may also specify an authentica-
tion method.
SERVER SSH ENABLE AUTH=<
auth >
If an authentication method is not specified, the previous authentication parameter will be
used. The default value is AUTH=PW.
3. If you are enabling SSH for the first time, you are advised that all other CCM appliance
sessions will be terminated. Enter
Y
to continue or
N
to cancel.
4. If you are reenabling SSH, you are prompted to use the existing SSH server key or generate a
new key. Enter
Y
to use the existing key or
N
to generate a new key.
For more information, see Server SSH command on page 57.
To disable SSH session access to the CCM appliance:
Issue a Server SSH command with the Disable parameter.
SERVER SSH DISABLE
When SSH is disabled, the CCM appliance operates in plain text mode.
To display SSH information:
Issue a Show Server Security command.
SHOW SERVER SECURITY
If SSH is enabled, the display will include SSH2. Regardless of whether SSH is enabled, the
display will indicate the authentication method that was specified with the Server SSH command.
Enabling plain text Telnet and SSH connections
Plain text (non-encrypted) Telnet connections are enabled by default.
If you enable SSH connections using the Server Security command and the Encrypt=SSH
parameter, plain text Telnet connections will be disabled. However, if you enable SSH connections
with the Server SSH command, both plain text and SSH connections will be allowed.