Command Line Interface
657
1553-KDU 137 365 Uen D 2006-06-16
To use the SSH server, complete these steps:
1.
Generate a Host Key Pair – Use the
ip ssh crypto host-key
generate
command to create a host public/private key pair.
2.
Provide Host Public Key to Clients – Many SSH client programs
automatically import the host public key during the initial connection setup
with the ECN330-switch. Otherwise, a known hosts file needs to be
manually created on the management station and the host public key placed
in it. An entry for a public key in the known hosts file would appear similar to
the following example:
10.1.0.54 1024 35 15684995401867669259333946775054617325313674890836547254
15020245593199868544358361651999923329781766065830956 10825913212890233
76546801726272571413428762941301196195566782 59566410486957427888146206
519417467729848654686157177393901647793559423035774130980227370877945452408397175264635
8058176716709574804776117
3.
Import Client’s Public Key to the ECN330-switch – Use the
copy tftp
public-key
command to copy a file containing the public key for all the
SSH client’s granted management access to the ECN330-switch. (Note that
these clients must be configured locally on the ECN330-switch with the
username
command as described on page 633.) The clients are
subsequently authenticated using these keys. The current firmware only
accepts public key files based on standard UNIX format as shown in the
following example for an RSA Version 1 key:
1024 35 1341081685609893921040944920155425347631641921872958921143173880
055536161631051775940838686311092912322268285192543746031009371877211996963178136627741
416898513204911720483033925432410163799759237144901193800609025394840848271781943722884
02533115952134861022902978982721353267131629432532818915045306393916643
[email protected]
4.
Set the Optional Parameters – Set other optional parameters, including the
authentication timeout, the number of retries, and the server key size.
5.
Enable SSH Service – Use the
ip ssh server
command to enable the
SSH server on the ECN330-switch.
6.
Configure Challenge-Response Authentication – When an SSH client
attempts to contact the ECN330-switch, the SSH server uses the host key
pair to negotiate a session key and encryption method. Only clients that
have a private key corresponding to the public keys stored on the ECN330-
switch can gain access. The following exchanges take place during this
process:
A
The client sends its public key to the ECN330-switch.
Summary of Contents for ECN330
Page 6: ...1553 KDU 137 365 Uen D 2006 06 16 Contents List of Abbreviations 1183 Glossary 1191 Index 1201...
Page 22: ...Introduction to the ECN330 switch 16 1553 KDU 137 365 Uen D 2006 06 16...
Page 26: ...Maintenance 20 1553 KDU 137 365 Uen D 2006 06 16...
Page 56: ...Initial Configuration 50 1553 KDU 137 365 Uen D 2006 06 16...
Page 520: ...Configuring the ECN330 switch 514 1553 KDU 137 365 Uen D 2006 06 16...
Page 1188: ...Specifications 1182 1553 KDU 137 365 Uen D 2006 06 16...
Page 1196: ...List of Abbreviations 1190 1553 KDU 137 365 Uen D 2006 06 16...
Page 1224: ...Index 1218 1553 KDU 137 365 Uen D 2006 06 16...
Page 1225: ......
