ZyXEL Communications Internet Security Gateway ZyWALL 100, User Manual

Page: 323 / 708

ZyWALL Series Internet Security Gateway
Remote Management Screens 18-15
Figure 18-11 SSH Communication Example
18.6 How SSH works
The following table summarizes how a secure connection is established between two remote hosts.
1. Host Identification
The SSH client sends a connection request to the
SSH server. The server identifies itself with a host
key. The client encrypts a randomly generated
session key with the host key and server key and
sends the result back to the server.
The client automatically saves any new server public
keys. In subsequent connections, the server public
key is checked again
st the saved version on the
client computer.
2. Encryption Method
Once the identification is verified, both the client and
server must agree on the type of encryption method
to use.
Figure 18-12How SSH Works
3. Authentication and Data Transmission
After the identification is verified and data encryption
activated, a secure tunnel is established between the
client and the server. The client then sends its
authentication information (user name and
password) to the server to log in to the server.