Nokia IP60 - Security Appliance, User Manual

Page: 431 / 494

Configuring SSH
Chapter 19: Maintenance 431
Select this
option… To allow access from…
Disabled Nowhere.
This disables both local and remote access capability.
This option is relevant to the SNMP protocol only.
Configuring SSH
IP60 appliance users can control the appliance via the command line, using the SSH (Secure Shell)
management protocol. You can enable users to do so via the Internet, by configuring remote SSH access.
You can also integrate the IP60 appliance with SSH-based management systems.
Note:
The IP60 appliance supports SSHv2 clients only. The SSHv1 protocol
contains security vulnerabilities and is not supported.
Note:
Configuring SSH is equivalent to creating a simple Allow rule, where the
destination is
This Gateway
. To create more complex rules for SSH, such as allowing
SSH connections from multiple IP address ranges, define Allow rules for TCP port
22, with the destination
This Gateway
. For information, see Using Rules on page
238.
To configure SSH
1. Click
Setup
in the main menu, and click the
Management
tab.
The
Management
page appears.
2. Specify from where SSH access should be granted.
See Access Options on page 430 for information.
Warning:
If remote SSH is enabled, your IP60 appliance settings can be changed
remotely, so it is especially important to make sure all IP60 appliance
users’
passwords are difficult to guess.