Accessing the CLI task list
49
CopperLink CL2300 User Manual
7
• Accessing the CLI
Accessing via the console port
If a console port is available, the host computer can be connected directly to it with a serial cable (see
). The host must use a terminal emulation application that supports serial interface communication.
Node
Node
Console
Host
Serial interface
Figure 15. Setup for initial configuration via the console port
Note
You do not need to configure IP settings if you access the Patton device via
the console port.
Console port procedure
Before using the CLI to enter configuration commands, do the following:
1.
Set up the hardware as described in the getting started guide.
2.
Configure your serial terminal as described in the getting started guide.
3.
Connect the serial terminal to your Patton device. Use a serial cable according to the description in the get-
ting started guide included with your Patton device.
4.
Power on your device. A series of boot messages are displayed on the terminal screen. At the end of the
boot sequence, press the
<return>
key and the login screen will be displayed. Proceed with logging in.
Accessing via a secure configuration session over SSH
SSH is the most commonly used and recommended method for connecting to a Patton device. A partial imple-
mentation of secure shell according RFC 4251, RFC 4252, RFC 4253 and RFC 4254 is provided. It is possible
to open a secure configuration session over SSH to a Patton device.
Note
The copy tftp and http functions are still insecure!
The SSH Transport Layer supports the following Algorithms: “ssh-rsa” or ‘ssh-dsa” public key for signing, “dif-
fie-hellmann-group1-sha1” and “diffie-hellmann-group14-sha1” for key exchange, “3des-cbc”, “aes256-cbc”
and “aes128-cbc” for encryption, “hmac-sha1” and “hmac-md5” for data integrity. For user authentication,
only the method “password” is supported. On the Connection Layer, only the request for an interactive com-
mand shell is supported. After the first startup of Trinity, the RSA or DSA server host key is going to be calcu-
lated. The RSA or DSA server host key is calculated only once and always remains the same.
Mode:
Configure
Step
Command
Purpose
1
device(cfg)#terminal ssh use auth <AAA profile name>
Set the AAA profile which is going to be
used for user authentication. The AAA
profile “default” is used when another
profile is not specified.