Gigamon GigaVUE-HC3, Hardware Installation Manual

Page: 102 / 142

102 GigaVUE-HC3 Hardware Installation Guide
SSH, Telnet, or Both?
Both Telnet and SSH2 are available for remote connections to the GigaVUE-HC3’s
Mgmt port. By default, SSH2 is enabled and Telnet is disabled. Use the ssh and
telnet-server commands in Configure mode to enable or disable the
corresponding connections. To disable the corresponding connection, you include
no before the command, as demonstrated in the following table. For example:
Advantages of SSH2
SSH2 is a more secure choice for remote connections than Telnet, providing an
encrypted channel instead of relying on clear text. It also provides stronger user
authentication capabilities, including the use of a public
host key . Host keys uniquely
identify a server, helping guarantee that the server you are connecting to is the server
you think it is.
GigaVUE includes default RSA v1/v2 and DSAv2-encrypted public host keys (SSH2
supports both RSA and DSA encryption algorithms). The first time you connect to
GigaVUE with an SSH2 client, the client will warn you that the host keys are not in your
local cache and show you the actual host key presented by the GigaVUE-HC3. Your
client will most likely give you the option of trusting the key, adding it to your local
cache. Once you have trusted the key, your client will alert you during connection if a
different key is presented.
Command Notes
Enable:
(config) # ssh server enable
Disable:
(config) # no ssh server enable
When SSH2 is enabled, use any compliant SSH2 client to connect
to the command-line interface remotely. For example, to connect
using the popular SSH2 client, PuTTY:
a. Start PuTTY and enter the GigaVUE H Series node’s IP
address in the Host Name field.
b. Click the SSH protocol radio button.
c. Click Open to open a connection.
If this is your first connection PuTTY warns you that the
host key presented by the GigaVUE H Series node is not
in your cache. You can add the key, connect without
adding the key, or cancel the connection. Refer to
Verifying Host Keys During Connection on page 103 for
information on how to verify that the host key shown is
the correct one.
d. Log in with GigaVUE credentials.
Enable:
(config) # telnet-server enable
Disable:
(config) # no telnet-server enable
When Telnet is enabled, use any compliant Telnet client to connect
to the command-line interface remotely. For example, to connect
using the Telnet client provided with Microsoft Windows:
a. Open a command prompt window and type Telnet .
b. Type open <Mgmt Port IP Address> .
c. Log in with GigaVUE credentials.