Lenovo ThinkSystem NE2552E, Application Manual

Page: 34 / 574

34
NE2552E Application Guide for ENOS 8.4
The following SSH clients have been tested:
 OpenSSH_5.1p1 Debian ‐ 3ubuntu1
 SecureCRT 5.0 (Van Dyke Technologies, Inc.)
 Putty beta 0.60
Note:
The Lenovo ENOS implementation of SSH supports version 2.0 and
supports SSH client version 2.0.
Using SSH with Password Authentication
By default, the SSH feature is enabled. For information about enabling and using
SSH for switch access, see “Secure Shell and Secure Copy” on page 89 .
Once the IP parameters are configured and the SSH service is enabled, you can
access the command line interface using an SSH connection.
To establish an SSH connection with the switch, run the SSH program on your
workstation by issuing the SSH command, followed by the switch IPv4 or IPv6
address:
You will then be prompted to enter a password as explained “Switch Login Levels”
on page 46 .
Using SSH with Public Key Authentication
SSH can also be used for switch authentication based on asymmetric cryptography.
Public encryption keys can be uploaded on the switch and used to authenticate
incoming login attempts based on the clients’ private encryption key pairs. After a
predefined number of failed public key login attempts, the switch reverts to
password ‐ based authentication.
To set up public key authentication:
1.
Enable SSH:
2.
Import the public key file using SFTP or TFTP for the admin user account:
Note:
When prompted to input a username, a valid user account name must be
entered. If no username is entered, the key is stored on the switch, and can be
assigned to a user account later.
Note:
A user account can have up to 100 public keys set up on the switch.
ssh
<switch IP address>
NE2552E(config)# ssh enable
NE2552E(config)# copy {sftp|tftp} public-key
Port type ["DATA"/"MGT"]: mgt
Address or name of remote host: 9.43.101.151
Source file name: 11.key
Username of the public key: admin
Confirm download operation (y/n) ? y