4RF Aprisa LTE, Руководство пользователя

Страница: 226 / 248

226 | Aprisa LTE User Manual
Command Line Interface
Connecting to the CLI via SSH
The Aprisa LTE router has a Command Line Interface (CLI) which provides basic product setup and
configuration. This can be useful if you need to confirm the router
’s IP address, for example.
This interface can be accessed via a Secure Shell (SSH) application via the Ethernet Port (RJ45) defaulting
to the standard TCP port 22 (although this can be modified).
Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an
unsecured network. It is used in the Aprisa LTE to provide a secure CLI remote access connection to the LTE
router. SSH is operated in server client mode, where the LTE router is acting as the SSH server. The
communication between the client and LTE router (server) is encrypted in SSHv2 (where SSHv2 vs SSHv1
uses a more enhanced security encryption algorithm).
The SSHv2 protocol consists of three major components:
•
The Transport Layer Protocol provides server authentication, confidentiality and integrity with
perfect forward secrecy.
•
The User Authentication Protocol which authenticates the client to the server.
•
The Connection Protocol which multiplexes the encrypted tunnel into several logical channels.
The Aprisa LTE supports the following SSH features.
•
Allows secure CLI connection over IPv4 and IPv6 networks.
•
The ‘ SuperVisor Inactivity timeout’ in Services > SuperVisor is also used to expire idle SSH sessions.
The Aprisa LTE SSH server uses the following algorithms to secure the connection:
• Key exchange: ecdh-sha2-nistp521, ecdh-sha2-nistp384, ecdh-sha2-nistp256, diffie-hellman-
group14-sha256, curve25519-sha256, diffie-hellman-group14-sha1, diffie-hellman-group1-sha256,
diffie-hellman-group1-sha1
• Data Integrity: hmac-sha2-256, hmac-sha1
• Encryption: aes128-ctr, aes256-ctr, aes256-cbc
• Host key: ssh-rsa, ecdsa-sha2-nistp256