Alcatel-Lucent OmniSwitch 6850 Series, Руководство по управлению

Страница: 74 / 292

Using Secure Shell Logging Into the Switch
page 2-12 OmniSwitch 6800/6850/9000 Switch Management Guide December 2007
Using Secure Shell
The OmniSwitch Secure Shell feature provides a secure mechanism that allows you to log in to a remote
switch, to execute commands on a remote device, and to move files from one device to another. Secure
Shell provides secure, encrypted communications even when your transmission is between two untrusted
hosts or over an unsecure network. Secure Shell protects against a variety of security risks including the
following:
•
IP spoofing
•
IP source routing
•
DNS spoofing
•
Interception of clear-text passwords and other data by intermediate hosts
•
Manipulation of data by users on intermediate hosts
Note. The OmniSwitch supports Secure Shell Version 2 only.
Secure Shell Components
The OmniSwitch includes both client and server components of the Secure Shell interface and the Secure
Shell FTP file transfer protocol. SFTP is a subsystem of the Secure Shell protocol. All Secure Shell FTP
data are encrypted through a Secure Shell channel.
Since Secure Shell provides a secure session, the Secure Shell interface and SFTP are recommended
instead of the Telnet program or the FTP protocol for communications over TCP/IP for sending file
transfers. Both Telnet and FTP are available on the OmniSwitch but they do not support encrypted
passwords.
Note. Secure Shell may only be used to log into the switch to manage the switch. It cannot be used for
Layer 2 authentication through the switch.
Secure Shell Interface
The Secure Shell interface is invoked when you enter the ssh command, and the Secure Shellv6 interface
is invoked by using the ssh6 command in an IPv6 environment. After the authentication process between
the client and the server is complete, the remote Secure Shell interface runs in the same way as Telnet.
Refer to
“Starting a Secure Shell Session” on page 2-15 to for detailed information.
Secure Shell File Transfer Protocol
Secure Shell FTP is the standard file transfer protocol used with Secure Shell version 2. Secure Shell FTP
is an interactive file transfer program (similar to the industry standard FTP) which performs all file
transfer operations over a Secure Shell connection.
You can invoke the Secure Shell FTP session by using the sftp command, and the SFTPv6 session by
using the sftp6 command in an IPv6 environment. Once the authentication phase is complete, the Secure
Shell FTP subsystem runs. Secure Shell FTP connects and logs into the specified host, then enters an inter-
active command mode. Refer to
“Starting a Secure Shell Session” on page 2-15 for detailed information.