Lenovo Flex System Fabric CN4093, Application Manual

Page: 33 / 634

© Copyright Lenovo 2017 Chapter 1: Switch Administration
33
Note:
CN4093s installed in Bay 1 and Bay 2 connect to server NICs 1 and 2,
respectively.
Using Telnet
A Telnet connection offers the convenience of accessing the switch from a
workstation connected to the network. Telnet access provides the same options for
user and administrator access as those available through the console port.
By default, Telnet access is disabled. Use the following commands (available on the
console only) to enable or disable Telnet access:
Once the switch is configured with an IP address and gateway, you can use Telnet
to access switch administration from any workstation connected to the
management network.
To establish a Telnet connection with the switch, run the Telnet program on your
workstation and issue the following Telnet command:
You will then be prompted to enter a password as explained “Switch Login Levels”
on page 47 .
Two attempts are allowed to log in to the switch. After the second unsuccessful
attempt, the Telnet client is disconnected via TCP session closure.
Using Secure Shell
Although a remote network administrator can manage the configuration of a
CN4093 via Telnet, this method does not provide a secure connection. The Secure
Shell (SSH) protocol enables you to securely log into another device over a network
to execute commands remotely. As a secure alternative to using Telnet to manage
switch configuration, SSH ensures that all data sent over the network is encrypted
and secure.
The switch can do only one session of key/cipher generation at a time. Thus, a
SSH/SCP client will not be able to login if the switch is doing key generation at that
time. Similarly, the system will fail to do the key generation if a SSH/SCP client is
logging in at that time.
The supported SSH encryption and authentication methods are listed below.
 Server Host Authentication: Client RSA ‐ authenticates the switch when starting
each connection
Bay 3 10.90.90.93 192.168.70.122
Bay 4 10.90.90.94 192.168.70.123
Table 2.
CN4093 IPv4 addresses, by switch ‐ module bay numbers
Bay Number Factory-Default IPv4 Address IPv4 Address Assigned by CMM
CN 4093(config)# [no] access telnet enable
telnet
<switch IPv4 or IPv6 address>